Amazon Bedrock Prompt Management prompts exist in the region
bedrock_prompt_management_exists
Bedrock Prompt Management enables centralized creation, versioning, and governance of prompts used with foundation models.
This region-level check verifies whether at least one managed prompt exists in each scanned region, used as an adoption signal for Prompt Management. The presence of a prompt does not by itself guarantee that every application prompt is managed.
Risk
Without Prompt Management, prompts are scattered across applications with no central oversight, versioning, or auditability over instructions sent to foundation models, weakening governance and compliance posture.
Managed prompts are a governance enabler; prompt injection defenses are provided by Bedrock guardrails, covered by separate checks.
prowler aws --checks bedrock_prompt_management_exists
Recommendation
Adopt Bedrock Prompt Management to centralize prompt definitions, enforce versioning, and maintain governance over model interactions.
Use managed prompts with guardrails and apply least privilege access controls to restrict who can create or modify prompts.
Remediation
aws bedrock-agent create-prompt --name example_prompt --default-variant default --variants '[{"name":"default","templateType":"TEXT","templateConfiguration":{"text":{"text":"Your prompt template here."}}}]'
- Open the Amazon Bedrock console
- Navigate to Prompt Management
- Click Create prompt
- Provide a name and configure the prompt template (a prompt can contain at most one variant; additional variants are created via CreatePromptVersion)
- Save the prompt
Source Code
Resource Type
Other
References
Related To
- bedrock_prompt_encrypted_with_cmk