aws-bedrock-runtime-prompt-response-payload
Model prompts, tool inputs, retrieved context, and responses can contain credentials or confidential data; runtime responses are not retained by a generic read API unless logging is enabled.
Where it sits
| location | bedrock-runtime InvokeModel/Converse request body and response body |
|---|
| location kind | payload |
|---|
| data kinds | credential password api_key customer_data pii source_code_secret sensitive_data |
|---|
| emits edge | CanReadData |
|---|
| service | Bedrock (aws:bedrock) |
|---|
Collection recipe
| access mode | creation_response_only |
|---|
| operation | InvokeModel/Converse |
|---|
| response path | body / output.message.content |
|---|
| encoding | json |
|---|
| params | {"BodyOrMessages": "\u003cprompt-payload\u003e", "modelId": "\u003cmodel-id\u003e"} |
|---|
Required permissions
References