External model weights imported into Bedrock without governance review
- Severity
- High
- Service
- Bedrock
- Check ID
- BEDROCK_IMPORTED_MODEL_UNREVIEWED
What this check finds
One or more models have been imported into Amazon Bedrock from external sources (S3). Imported models bypass AWS's model marketplace vetting. Without a formal review, these weights may contain backdoors, license violations, or malicious capabilities.
Passing looks like: Imported Bedrock models governance-reviewed.
How to fix it
Review all imported models in Bedrock console → Custom models → Imported models. Confirm each import was authorized, weights sourced from a trusted repository, and a security review was completed. Delete unauthorized imports.
Compliance controls it is evidence for
A failing result counts against these controls in KloudLytics; a passing one is evidence towards them. How compliance mapping works
| Framework | Controls |
|---|---|
| PCI-DSS v4.0.1 |
|
| HIPAA Security Rule |
|
| SOC 2 — Trust Services Criteria |
|
| NIST SP 800-53 Rev5 (Moderate) |
|
| NIST Cybersecurity Framework 2.0 |
|
| ISO/IEC 27001:2022 Annex A |
|
AI risk mappings
| Framework | Controls |
|---|---|
| OWASP Top 10 for LLM Applications (2025) |
|
| MITRE ATLAS (Adversarial Threat Landscape for AI Systems) |
|
Checked on every scan
KloudLytics runs this check each time it scans a connected AWS account, through a read-only role, and lists every affected resource with its region. On Pro and Business a fix is written for the specific resource rather than the general case above. The exact access it needs
More Bedrock checks
- CriticalBedrock agent IAM role has broad permissions
- CriticalBedrock API key belongs to an administrator
- HighBedrock agent has no guardrail applied
- HighBedrock knowledge base not encrypted with CMK
- HighBedrock model invocation logging not enabled
- HighLong-lived Bedrock API key in use
- HighNo AWS Budget alert configured for Bedrock spend
- HighNo Bedrock guardrails configured