使用 Amazon Bedrock 在受监管行业中安全提取知识.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Z U R I C H|1 1 S E P T E M B E R 2 0 2 5 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Secure knowledge extraction in regulated industry with Amazon BedrockMarco BocchioS U P 2 0 2He/himHead of AITransmutexOlaj

2、ide EnigbokanHe/himSenior Solutions ArchitectAWS 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Agenda01What are customers looking for with regards to RAG security?05Key takeaways02Introduction to Transmutex06Wrap up03How Transmutex built a secure RAG system on AWS04Deeper look i

3、nto the RAG workflow 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Security for RAG ArchitecturesWhat are customers looking for?Use additional contextAuthN/AuthZ to dataSensitive data useMulti-tenant architecturesProtection against prompt injections 2025,Amazon Web Services,Inc.

4、or its affiliates.All rights reserved.Raise your hand if you have heard or used Amazon Bedrock or any of the AWS security features with Amazon Bedrock 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Amazon BedrockBuilt on top of AWS leading security and complianceCustomer data is

5、never shared with foundation model providersData in transit is always encrypted with TLS 1.2 as a minimumMonitor API activity and also troubleshoot issues with AWS CloudTrailBedrock is in scope for common compliance standards including ISO,SOC,CSA STAR Level 2,is HIPAA eligibleCustomers can use Bedr

6、ock in compliance with the GDPRAmazon Bedrock is a FedRAMP High authorized service in the AWS GovCloud(US-West)SecureCompliant 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Amazon Bedrock Knowledge BasesNative support for RAGAmazon Bedrockknowledge basesM O D E LMetaLlamaAnthrop