Masking PII in Amazon Bedrock FM Responses

AIP-C01 By islever Editorial Last updated Oct 19, 2026

Implement data security and privacy controls. Implement input and output safety controls.

Short answer

A Create an Amazon Bedrock guardrail that defines the PII type and applies the MASK action to each foundation model response.

Question

A financial services company uses Amazon Bedrock to analyze customer data that is stored in an Amazon S3 bucket. The data includes personally identifiable information (PII). The company must mask PII from foundation model (FM) responses.
Which solution will meet this requirement with the LEAST operational effort?

Create a guardrail in Amazon Bedrock to filter PII content. Define the PII type and set the guardrail action to MASK. Configure Amazon Bedrock to apply the filter to each FM response. Correct Answer
Use Amazon Comprehend to detect PII entities in the S3 data before invoking Amazon Bed-rock. Configure an AWS Lambda function to call the Amazon Comprehend DetectPiiEntities API to mask detected PII. Store the processed data back to the original S3 bucket.
Use Amazon Macie to scan the S3 bucket for PII data. Configure an AWS Lambda function to store PII in a second S3 bucket. Use an Amazon EventBridge rule to invoke the Lambda func-tion.
Configure an AWS Lambda function to search for PII data. Implement a step in the Lambda function code to store the PII in a second S3 bucket and non-PII data into a third S3 bucket.

Key Takeaways

The question tests which AWS control masks PII in FM responses with the least operational effort, and the trap is choosing an ETL-style pre-processing pipeline (Comprehend, Macie, or hand-written Lambda) when a single managed guardrail policy already covers the requirement.

For financial services workloads on Amazon Bedrock, masking PII in foundation model responses is most cleanly achieved with native Bedrock Guardrails: define the PII type, set the guardrail action to MASK, and apply the filter to each FM response. This is the least-operations path because masking happens at inference time inside Bedrock, with no pre-processing pipeline, extra buckets, or custom code to build and maintain.

Common mistake: Option B is the most tempting wrong answer: learners pick Amazon Comprehend DetectPiiEntities plus a Lambda that rewrites the S3 data, because "detect PII and mask it" sounds rigorous. It works technically, but it forces the company to build, schedule, and maintain a pre-processing pipeline over S3 — far more operational effort than a configured guardrail, and it still does nothing for PII that appears in FM output.

Expert Analysis

Why the Answer Is Correct

Option A is the only choice that directly satisfies the stated requirement — masking PII from FM responses — using a managed Amazon Bedrock Guardrail with an added-content-filters policy where the PII type is defined and the guardrail action is set to MASK, applied to each FM response. Guardrails run natively at request/response time inside Bedrock, so there is no data-pipeline code, no additional buckets, no event wiring, and no ongoing job monitoring, which is exactly what "LEAST operational effort" means. Because the company already sends customer data to Bedrock, adding a guardrail to the inference call is a configuration change rather than an architecture change, and it also keeps masking consistent for every model invocation regardless of who calls it. This aligns with AWS guidance that guardrails are the built-in mechanism for content and PII filtering in Bedrock, complementing IAM and KMS controls for privacy.

Why the Other Options Are Wrong

Option B (Comprehend DetectPiiEntities + Lambda writing masked data back to S3) is a pre-processing pipeline: it masks data before the FM sees it, does not guarantee masking in the FM's response, and requires building and maintaining Lambda code plus batch scheduling over the bucket. Option C (Macie scanning the S3 bucket and moving PII to a second bucket) is a discovery and data-classification workflow, not an FM-response masking control, and Macie is designed to identify and catalog sensitive data rather than rewrite prompt/response content. Option D (a Lambda that scans and splits PII into one bucket and non-PII into a third) is fully custom code with no PII detection service behind it, the highest operational effort of all and still blind to PII generated in FM output.

Community Comment Notes

The lone community comment, from TNT87, selected option A, echoing the reasoning here: "Create a guardrail in Amazon Bedrock to filter PII content. Define the PII type and set the guardrail action to MASK." That aligns with the AWS well-architected guidance that guardrails are the managed, lowest-effort control for PII handling in Bedrock; there were no dissenting comments in the thread, and the vote distribution carried no contrary signal.

Official Reference

https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails.html

This link opens the official vendor documentation in a new tab.

Exam Strategy

When a question asks for the LEAST operational effort or the least administrative overhead, look for the fully managed service feature that performs the control at runtime (here, Bedrock Guardrails) instead of anything requiring Lambda code, extra buckets, or event rules. Also note the exact requirement target: masking in FM responses points to an output filter, not an S3 pre-processing job.

Frequently Asked Questions

Why is the Amazon Comprehend DetectPiiEntities + Lambda option not the least-effort answer?

It builds a pre-processing pipeline over S3 that must be scheduled and maintained, and it only masks data before the FM runs — it does not ensure PII is masked in the FM's response, which is what the question requires.

Does Amazon Macie help mask PII in Bedrock foundation model responses?

No. Macie discovers and classifies sensitive data in S3; it does not filter or mask content flowing in and out of a model, so it cannot meet the FM-response masking requirement.

More AIP-C01 FAQ →

Discussion 1 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 1

TNT87 👍 1 Answered A

Create a guardrail in Amazon Bedrock to filter PII content. Define the PII type and set the guardrail action to MASK. Configure Amazon Bedrock to apply the filter to each FM response

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All AIP-C01 Questions

Access 110 questions with complete answers and detailed explanations.

View Full AIP-C01 Practice Test →

← Back to AIP-C01 Study Guide