Summary
Sysdig's Threat Research Team discovered an issue with Amazon Bedrock API logging in CloudTrail. Failed API calls were logged as successful without error codes, hindering detection efforts and potentially generating false positives. The issue affected Bedrock Runtime APIs, specifically InvokeModel and Converse. AWS resolved the problem.
Affected Services
Amazon Bedrock, CloudTrail
Remediation
None required
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/mer-b
Entry Status
Finalized
Disclosure Date
Wed, Jul 17th, 2024
Exploitablity Period
Until 2024/08/09
Known ITW Exploitation
-
Detection Methods
null
Piercing Index Rating
-
Discovered by
Alessandro Brucato, Sysdig
