Generative AI capabilities
| Influence the future of the AWS Security Reference Architecture (AWS SRA) by taking a short survey |
This section discusses secure access, usage, and implementation recommendations for the following generative AI capabilities:
-
Capability 3. Providing secure access to data and systems for generative AI
-
Capability 4. Providing secure access, usage, and implementation of tools
-
Capability 5. Providing secure access, usage, and implementation of generative AI agents
-
Capability 6. Providing secure access, usage, and implementation for AI applications
Most capability sections include the following information:
-
Rationale explains what the capability does and when to use it.
-
Security considerations describes risks that are specific to the capability.
-
Remediations reviews the AWS services and features that address the risks.
-
Recommended AWS services to build the capability securely.
All capabilities build on Capability 1 (foundation model inference) because they all invoke models. When you combine capabilities, apply security controls from each relevant section. For example, a customized model with Retrieval Augmented Generation (RAG) requires controls from Capabilities 1, 2, and 3.
