2026 Securities Licensing Study Guides (SIE, Series 7 & Series 66) are now live
Domain 3 • Chapter 3Section 3.3

3.3 Agents for Amazon Bedrock and Safety Guardrails

Covers autonomous multi-step execution via Bedrock Agents, Action Groups, Lambda, and centralized safety filtering with Guardrails.

🎯 Key AWS AI Exam Takeaways

  • Bedrock Agents orchestrate multi-step tasks by autonomously invoking AWS Lambda Action Groups defined by OpenAPI schemas.
  • Guardrails for Amazon Bedrock provides centralized content filtering, denied topics, word filters, and PII masking.
  • Contextual Grounding Checks in Guardrails mathematically detect hallucinations in RAG responses.

Agents for Amazon Bedrock extend foundation models from passive conversationalists into active autonomous assistants capable of executing enterprise business logic. When given a goal, the Agent dynamically reasons through necessary sub-tasks, requests clarification for missing inputs, and invokes 'Action Groups' backed by AWS Lambda functions and OpenAPI specifications.

To ensure generative applications comply with corporate policies and regulatory mandates, Guardrails for Amazon Bedrock establishes centralized safety and content boundaries across all models in Bedrock. Guardrails inspects both inbound user prompts and outbound model generations.

Key guardrail capabilities include Denied Topics (blocking discussions outside defined boundaries), Content Filters (moderating hate speech, violence, and harassment), Sensitive Information Filters (masking or blocking PII like SSNs and credit cards), and Contextual Grounding Checks that detect model hallucinations by validating factual fidelity against retrieved RAG sources.

⚠️ Common Pearson VUE Exam Traps

  • Do not rely on client-side regex for safety; Bedrock Guardrails applies across both prompt inputs and model outputs centrally.
  • Remember that Bedrock Agents can query Knowledge Bases for information retrieval during multi-step execution.

Knowledge Checkpoint

Knowledge Checkpoint • Section 3.3

A healthcare provider is deploying a patient-facing medical Q&A assistant across multiple foundation models on Amazon Bedrock. The security team requires a centralized mechanism to block medical diagnosis advice, filter offensive language, and automatically redact patient Social Security Numbers and phone numbers across all models. What should they implement?