Non-approved AI provider model in active use

Severity: Medium
Service: Bedrock
Check ID: BEDROCK_SHADOW_AI

What this check finds

A Bedrock batch inference job or prompt router references a foundation model from a provider not on the approved list (Amazon, Anthropic, AI21, Cohere, Meta, Stability AI, Mistral AI). Unapproved providers may not meet your organization's data-handling, licensing, or compliance requirements.

Passing looks like: Only approved AI models in use.

How to fix it

Review the flagged model provider. If intentional, add the provider to your approved list. Otherwise, update batch jobs and prompt routers to use approved providers only. Bedrock console → Batch inference / Prompt routers.

Compliance controls it is evidence for

A failing result counts against these controls in KloudLytics; a passing one is evidence towards them. How compliance mapping works

Compliance controls mapped to Non-approved AI provider model in active use
Framework	Controls
PCI-DSS v4.0.1	2.2 System components are configured and managed securely
HIPAA Security Rule	164.308(a)(5) Security Awareness — Protection from Malicious Software
SOC 2 — Trust Services Criteria	CC7.1 Threat and Vulnerability Detection
NIST SP 800-53 Rev5 (Moderate)	CM-7 Least Functionality CM-8 System Component Inventory
NIST Cybersecurity Framework 2.0	ID.AM-01 Asset Management — Inventories of assets are maintained PR.PS-01 Configuration management practices are applied
ISO/IEC 27001:2022 Annex A	A.5.9 Inventory of information and other associated assets A.8.19 Installation of software on operational systems

AI risk mappings

AI risk taxonomies mapped to Non-approved AI provider model in active use
Framework	Controls
OWASP Top 10 for LLM Applications (2025)	LLM03 Supply Chain
MITRE ATLAS (Adversarial Threat Landscape for AI Systems)	AML.T0010 AI Supply Chain Compromise

Checked on every scan

KloudLytics runs this check each time it scans a connected AWS account, through a read-only role, and lists every affected resource with its region. On Pro and Business a fix is written for the specific resource rather than the general case above. The exact access it needs

More Bedrock checks

All Bedrock checks