Policy: AWS > Bedrock > Guardrail > Settings > Sensitive Information Policy > PII Entities Config

List of AWS-defined PII entity types the guardrail should detect or anonymize. An empty list (the default) means "not configured" and is excluded from the diff and the enforced sensitiveInformationPolicyConfig.

The optional inputAction / outputAction / inputEnabled / outputEnabled fields per-entity override the guardrail-wide action for that direction.

Targets

This policy targets the following resource types:

AWS > Bedrock > Guardrail

Primary Policy

This policy is used with the following primary policy:

AWS > Bedrock > Guardrail > Settings > Sensitive Information Policy

Controls

Setting this policy configures this control:

AWS > Bedrock > Guardrail > Settings

Policy Specification

Schema Type	`array`
Default	`[]`
Examples [YAML]	`- type: EMAIL action: ANONYMIZE` `- type: EMAIL action: ANONYMIZE - type: PHONE action: ANONYMIZE - type: CREDIT_DEBIT_CARD_NUMBER action: BLOCK`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/security

Policy Type URI

tmod:@turbot/aws-bedrock#/policy/types/bedrockGuardrailSettingsSensitiveInformationPolicyPiiEntitiesConfig

GraphQL

query policyType(id: "tmod:@turbot/aws-bedrock#/policy/types/bedrockGuardrailSettingsSensitiveInformationPolicyPiiEntitiesConfig") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-bedrock#/policy/types/bedrockGuardrailSettingsSensitiveInformationPolicyPiiEntitiesConfig'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-bedrock#/policy/types/bedrockGuardrailSettingsSensitiveInformationPolicyPiiEntitiesConfig'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-bedrock#/policy/types/bedrockGuardrailSettingsSensitiveInformationPolicyPiiEntitiesConfig"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-bedrock#/policy/types/bedrockGuardrailSettingsSensitiveInformationPolicyPiiEntitiesConfig"