Status: IN
Amazon GuardDuty automatically analyzes CloudTrail management events for suspicious Bedrock API activity, such as removing Guardrails or changing training data S3 buckets.
Source: entries/2026/03/12/bedrock-latest-userguide-logging-using-cloudtrailhtml.md