Reports for Every Cloud
Purpose-built reports that answer the questions cloud and security teams actually ask — across AWS, Azure, and Google Cloud.
60
Curated Reports
2077+
Controls Checked
3
Cloud Providers
5 min
To First Results
Agentic AI Best Practices
16 controls
9 services covered
Checks Bedrock Agents, Flows, Knowledge Bases, and AgentCore — encryption, guardrails, authorization, VPC network mode, session recording, and data-retention posture for AI agents.
What we check
Bedrock Knowledge Bases3
- Bedrock Knowledge Bases Ingestion Logging Enabled
- Bedrock Knowledge Bases Resources Encrypted with Customer-Managed KMS Key
- Configure Data Deletion Policy for Bedrock Knowledge Base Data
Bedrock AgentCore Gateways3
- Bedrock AgentCore Gateways should require authorization for inbound requests
- AgentCore Gateway Invocation Logging Enabled
- AgentCore Gateway WAF Associated
Bedrock Agents2
- Agents for Amazon Bedrock Encrypted with Customer-Managed KMS Key
- Use Bedrock Guardrails to Protect Agent Sessions
Bedrock Flows2
- Bedrock Flows Resources Encrypted with Customer-Managed KMS Key
- Bedrock Flows Are Configured
Bedrock AgentCore Browser Sessions2
- Bedrock AgentCore custom browsers should not use public network mode
- Bedrock AgentCore custom browsers should have session recording enabled
Bedrock Prompt Management1
- Bedrock Prompt Catalog Implemented with Versioning
Bedrock AgentCore Runtimes1
- Bedrock AgentCore runtimes should be configured with VPC network mode
GuardDuty AI Protection1
- GuardDuty AI Protection Enabled Where AI Resources Exist
Security Hub Settings1
- Security Hub AI Security Best Practices Enabled
Run these reports on your own cloud
Connect an account and get your first set of reports in minutes — free to start, no credit card required.