Deploy your guardrail - Amazon Bedrock
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

Deploy your guardrail

When you're ready to deploy your guardrail to production, you create a version of it and invoke the version of the guardrail in your application. A version is a snapshot of your guardrail that you create at a point in time when you are iterating on the working draft of the guardrail. Create versions of your guardrail when you are satisfied with a set of configurations.

You can use the test window (for more information, see Test your guardrail) to compare how different versions of your guardrail perform when evaluating the input prompts and model responses, and generating controlled responses for the final output. When you use versions, you can switch between different configurations for your guardrail, and update your application with the most appropriate version for your use case.

The following topics discuss how to create a version of your guardrail when it's ready for deployment, view information about it, and delete it when you no longer want to use it.

Note

Guardrail versions aren't separate resources and don't have their own ARN. A guardrail ARN doesn't include a version, so the Resource element of an IAM policy can't target an individual version. It applies to the guardrail and all of its versions.

To restrict access to a specific guardrail version, use the bedrock:GuardrailIdentifier condition key, which accepts the guardrail ARN with an optional :version suffix. For more information, see Enforce the use of specific guardrails in model inference requests.

Topics