Access Controls, Data Security, and Shared Responsibility
Understand how to apply access controls and data security for AI workloads using AWS shared responsibility models. Learn role-based access, data classification, minimization, and audit requirements to protect sensitive customer information while ensuring governance and compliance in AI implementations.
AWS does not decide which support staff may view a customer’s sensitive history through the guidance assistant. That is the organization’s decision and responsibility, even when AWS provides the underlying cloud and managed AI services. As the assistant handles sensitive customer information, its approved access and data-use rules must become part of its governance record.
Access and data controls for the guidance assistant
Least privilege means granting each role only the access needed for its approved work. For the guidance assistant, a frontline support representative may submit a customer question and receive permitted guidance. That role does not automatically need access to the full customer record, historical prompts from other representatives, evaluation material, or administrative settings.
Role-based access assigns permissions according to a job function rather than an individual’s convenience. The accountable ...