@composurecdk/bedrock 0.10.1 → 0.10.3

package/README.md

@@ -39,12 +39,13 @@ compose(
 
 `modelGrants` and `createModelAlarmBuilder` take an `InferenceTarget`:
 
-| Target                               | Invokes                                                                            |
-| ------------------------------------ | ---------------------------------------------------------------------------------- |
-| `FoundationModelIdentifier`          | A foundation model in the stack's Region                                           |
-| `inferenceProfile.geographic({ … })` | A cross-Region profile that stays within one geography (`us`, `eu`, `apac`, …)     |
-| `inferenceProfile.global(model)`     | A cross-Region profile that routes to any supported commercial Region              |
-| `IModel`                             | Any model by ARN, e.g. `ProvisionedModel.fromProvisionedModelArn(…)` (grants only) |
+| Target                               | Invokes                                                                                     |
+| ------------------------------------ | ------------------------------------------------------------------------------------------- |
+| `FoundationModelIdentifier`          | A foundation model in the stack's Region                                                    |
+| `inferenceProfile.geographic({ … })` | A cross-Region profile that stays within one geography (`us`, `eu`, `apac`, …)              |
+| `inferenceProfile.global(model)`     | A cross-Region profile that routes to any supported commercial Region                       |
+| `ApplicationInferenceProfile`        | An account-owned profile over a model or system-defined profile, tagged for cost allocation |
+| `IModel`                             | Any model by ARN, e.g. `ProvisionedModel.fromProvisionedModelArn(…)` (grants only)          |
 
 A profile's id is derived from its model, so the id a caller invokes and the model it is granted cannot drift apart. Use `new FoundationModelIdentifier("…")` for a model newer than the installed CDK's constants.
 
@@ -62,17 +63,20 @@ foundationModelFor(profile.profileId).modelId; // "anthropic.claude-haiku-4-5-20
 
 `parse` and `foundationModelFor` throw on an id without a known geography or `global` prefix (`INFERENCE_PROFILE_GEOGRAPHIES`), rather than mistake a provider such as `anthropic.` for one.
 
+Profiles are plain values rather than the alpha `CrossRegionInferenceProfile` L2, for the [reasons given for guardrails](#why-the-l1-constructs-not-the-alpha-l2) and because its grants don't match what live IAM needs ([#536](https://github.com/laazyj/composureCDK/issues/536)).
+
 ## Grants
 
 `modelGrants.invoke(target)` grants `bedrock:InvokeModel` and `bedrock:InvokeModelWithResponseStream`, which together cover `InvokeModel`, `Converse` and their streaming variants. Pass it to any grantee builder's `grant(...)`.
 
-| Target     | Statements                                                                                                                                                                                                   |
-| ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
-| Model      | The foundation model in the source Region                                                                                                                                                                    |
-| Geographic | The profile; the foundation model in the source Region and every routing Region, conditioned on `bedrock:InferenceProfileArn`                                                                                |
-| Global     | The profile; the foundation model in the source Region; the Region-less foundation model ARN with `aws:RequestedRegion: unspecified`. Both model statements are conditioned on `bedrock:InferenceProfileArn` |
+| Target      | Statements                                                                                                                                                                                                   |
+| ----------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| Model       | The foundation model in the source Region                                                                                                                                                                    |
+| Geographic  | The profile; the foundation model in the source Region and every routing Region, conditioned on `bedrock:InferenceProfileArn`                                                                                |
+| Global      | The profile; the foundation model in the source Region; the Region-less foundation model ARN with `aws:RequestedRegion: unspecified`. Both model statements are conditioned on `bedrock:InferenceProfileArn` |
+| Application | The profile; its source's foundation models, conditioned on `bedrock:InferenceProfileArn` being the application profile                                                                                      |
 
-These follow the policies in the Bedrock user guide for [geographic](https://docs.aws.amazon.com/bedrock/latest/userguide/geographic-cross-region-inference.html#geographic-cris-iam-setup) and [global](https://docs.aws.amazon.com/bedrock/latest/userguide/global-cross-region-inference.html#global-cris-iam-setup) cross-Region inference. The `bedrock:InferenceProfileArn` condition makes the foundation models reachable only through the profile ([GENSEC01-BP01](https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec01-bp01.html)); to also call a model directly, grant it separately.
+The model and system-profile rows follow the policies in the Bedrock user guide for [geographic](https://docs.aws.amazon.com/bedrock/latest/userguide/geographic-cross-region-inference.html#geographic-cris-iam-setup) and [global](https://docs.aws.amazon.com/bedrock/latest/userguide/global-cross-region-inference.html#global-cris-iam-setup) cross-Region inference. The `bedrock:InferenceProfileArn` condition makes the foundation models reachable only through the profile ([GENSEC01-BP01](https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec01-bp01.html)); to also call a model directly, grant it separately. The application row was verified against live IAM for a global source: the source profile needs no statement of its own.
 
 `invocationArns(target, scope)` returns the same resource ARNs for policies you write yourself, such as service control policies.
 
@@ -107,9 +111,98 @@ createModelAlarmBuilder()
 
 No alarm actions are configured; route them with `alarmActionsPolicy`.
 
-## Not yet covered
+## Model invocation logging
+
+`createModelInvocationLoggingBuilder()` turns on [model invocation logging](https://docs.aws.amazon.com/bedrock/latest/userguide/model-invocation-logging.html) for the account in the stack's Region ([GENSEC01-BP04](https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec01-bp04.html)). The setting has no CloudFormation resource, so a custom resource applies it on deploy and deletes it with the stack.
+
+```ts
+createModelInvocationLoggingBuilder()
+  .largeDataBucket(ref("audit", (r: BucketBuilderResult) => r.bucket))
+  .largeDataKeyPrefix("bedrock");
+```
+
+It creates:
+
+- a log group, from `@composurecdk/logs`' defaults; customise it with `logGroup: { configure }`;
+- a role Bedrock assumes to write to the log group's `aws/bedrock/modelinvocations` stream, trusted only for this account and Region;
+- an alarm on failed deliveries to the log group, and to the large-data bucket when one is configured.
+
+Every modality is logged by default (`MODEL_INVOCATION_LOGGING_DEFAULTS`). Bodies over 100 KB and binary data are only logged to a `largeDataBucket`.
+
+The setting is one per account and Region. Build it once: a second stack's configuration overwrites the first, and deleting either stack turns logging off.
+
+## Guardrails
+
+`createGuardrailBuilder()` creates a guardrail and publishes a version of it ([GENSEC02-BP01](https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec02-bp01.html)). A configuration change publishes a new version, so callers never use the working draft.
+
+```ts
+compose(
+  {
+    safety: createGuardrailBuilder()
+      .name("support-assistant")
+      .topicPolicyConfig({
+        topicsConfig: [{ name: "Legal", definition: "Legal advice.", type: "DENY" }],
+      }),
+    handler: createFunctionBuilder()
+      // runtime, handler, code …
+      .grant(
+        modelGrants.invoke(haiku, {
+          requireGuardrail: ref("safety", (r: GuardrailBuilderResult) => r.reference),
+        }),
+      ),
+  },
+  { safety: [], handler: ["safety"] },
+);
+```
+
+By default the guardrail filters every harmful-content category (sexual, violence, hate, insults, misconduct) and prompt attacks at `HIGH`, with the Bedrock console's default blocked message (`GUARDRAIL_DEFAULTS`). Topic, word, sensitive-information and contextual-grounding policies depend on the workload and are not defaulted.
+
+`requireGuardrail` makes the grantee [use the guardrail](https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-permissions-id.html): the invoke allow is conditioned on `bedrock:GuardrailIdentifier`, an explicit deny refuses any other call, and the grantee may apply the guardrail. `guardrailGrants.apply` grants `bedrock:ApplyGuardrail` alone.
+
+Guardrail errors and throttles are only published per account, so the guardrail's alarms are opt-in: `invocationsIntervened` (Sum) and `invocationLatency` (p90), each with a threshold you supply.
 
-- **Model invocation logging** ([GENSEC01-BP04](https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec01-bp04.html)). An account-wide, per-Region setting with no CloudFormation resource.
-- **Guardrails** ([GENSEC02-BP01](https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec02-bp01.html)).
-- **Application inference profiles**, for cost allocation tags.
-- **Private connectivity** ([GENSEC01-BP02](https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec01-bp02.html)): a `bedrock-runtime` interface endpoint, built with `@composurecdk/ec2`.
+### Why the L1 constructs, not the alpha L2
+
+The builder wraps `CfnGuardrail` and `CfnGuardrailVersion` because the `Guardrail` L2 is still only in `@aws-cdk/aws-bedrock-alpha`. Building on the alpha would:
+
+- make it a peer dependency of this whole package, version-locked to each `aws-cdk-lib` release, even for consumers who only use `modelGrants`;
+- inherit its bug of replacing the guardrail version on every deploy ([aws/aws-cdk#38674](https://github.com/aws/aws-cdk/issues/38674)).
+
+When `aws-cdk-lib` ships a stable `Guardrail`, the builder will move onto it ([#533](https://github.com/laazyj/composureCDK/issues/533)). `result.reference` (used by grants and alarms) and `GUARDRAIL_DEFAULTS` carry over; `result.guardrail`, `result.version` and the `CfnGuardrailProps`-shaped props will change to the L2's.
+
+## Application inference profiles
+
+`createApplicationInferenceProfileBuilder()` creates an account-owned inference profile over a foundation model or a system-defined profile. The builder's tags land on the profile, so a workload's model usage can be separated in cost allocation.
+
+```ts
+const supportModel = ref<ApplicationInferenceProfileBuilderResult>("supportModel").get("profile");
+
+compose(
+  {
+    supportModel: createApplicationInferenceProfileBuilder()
+      .inferenceProfileName("support-assistant")
+      .source(haiku)
+      .tag("CostCentre", "support"),
+    handler: createFunctionBuilder()
+      // runtime, handler, code …
+      .environment({ MODEL_ID: supportModel.get("profileArn") })
+      .grant(modelGrants.invoke(supportModel)),
+  },
+  { supportModel: [], handler: ["supportModel"] },
+);
+```
+
+Bedrock reports calls through the profile under its own id, not the source model's, so alarm on the profile: `createModelAlarmBuilder().model(supportModel)`.
+
+The builder wraps `CfnApplicationInferenceProfile` rather than the alpha `ApplicationInferenceProfile` L2 for the reasons given for [guardrails](#why-the-l1-constructs-not-the-alpha-l2), and because `modelGrants` grants what live IAM needs rather than the alpha's broader grants. It will move onto the L2 when `aws-cdk-lib` ships one ([#534](https://github.com/laazyj/composureCDK/issues/534)); the `ApplicationInferenceProfile` value, grants and alarms carry over.
+
+## Private connectivity
+
+To keep model calls off the public internet ([GENSEC01-BP02](https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec01-bp02.html)), give the VPC a `bedrock-runtime` interface endpoint with `@composurecdk/ec2`:
+
+```ts
+createInterfaceEndpointBuilder()
+  .vpc(ref<VpcBuilderResult>("network").get("vpc"))
+  .service(InterfaceVpcEndpointAwsService.BEDROCK_RUNTIME)
+  .allowDefaultPortFrom(ref<FunctionBuilderResult>("handler").get("function"));
+```

package/dist/commonjs/alarm-definition.d.ts

@@ -0,0 +1,29 @@
+import { type Metric, TreatMissingData } from "aws-cdk-lib/aws-cloudwatch";
+import type { AlarmConfig, AlarmConfigDefaults, AlarmDefinition, ResolvedAlarmConfig } from "@composurecdk/cloudwatch";
+/**
+ * 3 breaching minutes out of 5: SDK retries absorb isolated throttles and
+ * transient errors, so a single datapoint is noise. No traffic emits no data.
+ * @internal
+ */
+export declare const SUSTAINED: {
+    evaluationPeriods: number;
+    datapointsToAlarm: number;
+    treatMissingData: TreatMissingData;
+};
+/** A greater-than alarm definition from a resolved config. @internal */
+export declare function toDefinition(key: string, metric: Metric, cfg: ResolvedAlarmConfig, description: string): AlarmDefinition;
+/** A recommended alarm on one metric. @internal */
+export interface ThresholdAlarmSpec {
+    metricName: string;
+    statistic: string;
+    /** Absent for opt-in alarms, whose threshold the caller must supply. */
+    defaults?: AlarmConfigDefaults;
+    describe: (threshold: number) => string;
+}
+/**
+ * Resolves each spec against the caller's config: on-by-default alarms merge
+ * over their defaults, opt-in alarms are created only when configured, with
+ * a threshold. @internal
+ */
+export declare function resolveThresholdAlarms<K extends string>(specs: Record<K, ThresholdAlarmSpec>, config: Partial<Record<K, AlarmConfig | false>> | undefined, metric: (metricName: string, statistic: string) => Metric): AlarmDefinition[];
+//# sourceMappingURL=alarm-definition.d.ts.map

package/dist/commonjs/alarm-definition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-definition.d.ts","sourceRoot":"","sources":["../../src/alarm-definition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,MAAM,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC/F,OAAO,KAAK,EACV,WAAW,EACX,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAGlC;;;;GAIG;AACH,eAAO,MAAM,SAAS;;;;CAIrB,CAAC;AAEF,wEAAwE;AACxE,wBAAgB,YAAY,CAC1B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,mBAAmB,EACxB,WAAW,EAAE,MAAM,GAClB,eAAe,CAYjB;AAED,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC;CACzC;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,SAAS,MAAM,EACrD,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,kBAAkB,CAAC,EACpC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC,CAAC,GAAG,SAAS,EAC3D,MAAM,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,GACxD,eAAe,EAAE,CAgBnB"}

package/dist/commonjs/alarm-definition.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUSTAINED = void 0;
+exports.toDefinition = toDefinition;
+exports.resolveThresholdAlarms = resolveThresholdAlarms;
+const aws_cloudwatch_1 = require("aws-cdk-lib/aws-cloudwatch");
+const cloudwatch_1 = require("@composurecdk/cloudwatch");
+/**
+ * 3 breaching minutes out of 5: SDK retries absorb isolated throttles and
+ * transient errors, so a single datapoint is noise. No traffic emits no data.
+ * @internal
+ */
+exports.SUSTAINED = {
+    evaluationPeriods: 5,
+    datapointsToAlarm: 3,
+    treatMissingData: aws_cloudwatch_1.TreatMissingData.NOT_BREACHING,
+};
+/** A greater-than alarm definition from a resolved config. @internal */
+function toDefinition(key, metric, cfg, description) {
+    return {
+        key,
+        alarmName: cfg.alarmName,
+        metric,
+        threshold: cfg.threshold,
+        comparisonOperator: aws_cloudwatch_1.ComparisonOperator.GREATER_THAN_THRESHOLD,
+        evaluationPeriods: cfg.evaluationPeriods,
+        datapointsToAlarm: cfg.datapointsToAlarm,
+        treatMissingData: cfg.treatMissingData,
+        description,
+    };
+}
+/**
+ * Resolves each spec against the caller's config: on-by-default alarms merge
+ * over their defaults, opt-in alarms are created only when configured, with
+ * a threshold. @internal
+ */
+function resolveThresholdAlarms(specs, config, metric) {
+    return Object.keys(specs).flatMap((key) => {
+        const spec = specs[key];
+        const userConfig = config?.[key];
+        if (userConfig === false || (userConfig === undefined && !spec.defaults))
+            return [];
+        if (!spec.defaults && userConfig?.threshold === undefined) {
+            throw new Error(`The "${key}" alarm has no default threshold. Supply one, e.g. ` +
+                `recommendedAlarms({ ${key}: { threshold: … } }).`);
+        }
+        const cfg = (0, cloudwatch_1.resolveAlarmConfig)(userConfig, spec.defaults ?? { ...exports.SUSTAINED, threshold: 0 });
+        return [
+            toDefinition(key, metric(spec.metricName, spec.statistic), cfg, spec.describe(cfg.threshold)),
+        ];
+    });
+}
+//# sourceMappingURL=alarm-definition.js.map

package/dist/commonjs/alarm-definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"alarm-definition.js","sourceRoot":"","sources":["../../src/alarm-definition.ts"],"names":[],"mappings":";;;AAqBA,oCAiBC;AAgBD,wDAoBC;AA1ED,+DAA+F;AAO/F,yDAA8D;AAE9D;;;;GAIG;AACU,QAAA,SAAS,GAAG;IACvB,iBAAiB,EAAE,CAAC;IACpB,iBAAiB,EAAE,CAAC;IACpB,gBAAgB,EAAE,iCAAgB,CAAC,aAAa;CACjD,CAAC;AAEF,wEAAwE;AACxE,SAAgB,YAAY,CAC1B,GAAW,EACX,MAAc,EACd,GAAwB,EACxB,WAAmB;IAEnB,OAAO;QACL,GAAG;QACH,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM;QACN,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,kBAAkB,EAAE,mCAAkB,CAAC,sBAAsB;QAC7D,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,WAAW;KACZ,CAAC;AACJ,CAAC;AAWD;;;;GAIG;AACH,SAAgB,sBAAsB,CACpC,KAAoC,EACpC,MAA2D,EAC3D,MAAyD;IAEzD,OAAQ,MAAM,CAAC,IAAI,CAAC,KAAK,CAAS,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACpF,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,UAAU,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,QAAQ,GAAG,qDAAqD;gBAC9D,uBAAuB,GAAG,wBAAwB,CACrD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAA,+BAAkB,EAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE,GAAG,iBAAS,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5F,OAAO;YACL,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;SAC9F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/commonjs/application-inference-profile-builder.d.ts

@@ -0,0 +1,44 @@
+import { CfnApplicationInferenceProfile, type CfnApplicationInferenceProfileProps } from "aws-cdk-lib/aws-bedrock";
+import type { IConstruct } from "constructs";
+import { type Lifecycle, type Resolvable } from "@composurecdk/core";
+import { type ITaggedBuilder } from "@composurecdk/cloudformation";
+import type { ApplicationInferenceProfile } from "./inference-profile.js";
+/** Configuration properties for {@link createApplicationInferenceProfileBuilder}. */
+export interface ApplicationInferenceProfileBuilderProps extends Omit<CfnApplicationInferenceProfileProps, "modelSource" | "tags"> {
+    /** The foundation model or system-defined profile to route to. Required. */
+    source: Resolvable<ApplicationInferenceProfile["source"]>;
+}
+/** The build output of an {@link IApplicationInferenceProfileBuilder}. */
+export interface ApplicationInferenceProfileBuilderResult {
+    applicationInferenceProfile: CfnApplicationInferenceProfile;
+    /** The profile as an invocation target, for grants and callers. */
+    profile: ApplicationInferenceProfile;
+}
+/**
+ * A fluent builder for an Amazon Bedrock application inference profile.
+ *
+ * @see {@link createApplicationInferenceProfileBuilder}
+ */
+export type IApplicationInferenceProfileBuilder = ITaggedBuilder<ApplicationInferenceProfileBuilderProps, ApplicationInferenceProfileBuilder>;
+declare class ApplicationInferenceProfileBuilder implements Lifecycle<ApplicationInferenceProfileBuilderResult> {
+    props: Partial<ApplicationInferenceProfileBuilderProps>;
+    build(scope: IConstruct, id: string, context?: Record<string, object>): ApplicationInferenceProfileBuilderResult;
+}
+/**
+ * Creates a builder for an {@link ApplicationInferenceProfile}, which carries
+ * the builder's tags. Pass the result's `profile` to `modelGrants.invoke`, and
+ * its `profileArn` to callers as the model id.
+ *
+ * @example
+ * ```ts
+ * createApplicationInferenceProfileBuilder()
+ *   .inferenceProfileName("support-assistant")
+ *   .source(haiku)
+ *   .tag("CostCentre", "support");
+ * ```
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/inference-profiles-create.html
+ */
+export declare function createApplicationInferenceProfileBuilder(): IApplicationInferenceProfileBuilder;
+export {};
+//# sourceMappingURL=application-inference-profile-builder.d.ts.map

package/dist/commonjs/application-inference-profile-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-inference-profile-builder.d.ts","sourceRoot":"","sources":["../../src/application-inference-profile-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,8BAA8B,EAC9B,KAAK,mCAAmC,EACzC,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,KAAK,SAAS,EAAW,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,KAAK,cAAc,EAAiB,MAAM,8BAA8B,CAAC;AAClF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAG1E,qFAAqF;AACrF,MAAM,WAAW,uCAAwC,SAAQ,IAAI,CACnE,mCAAmC,EACnC,aAAa,GAAG,MAAM,CACvB;IACC,4EAA4E;IAC5E,MAAM,EAAE,UAAU,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC;CAC3D;AAED,0EAA0E;AAC1E,MAAM,WAAW,wCAAwC;IACvD,2BAA2B,EAAE,8BAA8B,CAAC;IAC5D,mEAAmE;IACnE,OAAO,EAAE,2BAA2B,CAAC;CACtC;AAED;;;;GAIG;AACH,MAAM,MAAM,mCAAmC,GAAG,cAAc,CAC9D,uCAAuC,EACvC,kCAAkC,CACnC,CAAC;AAEF,cAAM,kCAAmC,YAAW,SAAS,CAAC,wCAAwC,CAAC;IACrG,KAAK,EAAE,OAAO,CAAC,uCAAuC,CAAC,CAAM;IAE7D,KAAK,CACH,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACnC,wCAAwC;CAwB5C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wCAAwC,IAAI,mCAAmC,CAI9F"}

package/dist/commonjs/application-inference-profile-builder.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createApplicationInferenceProfileBuilder = createApplicationInferenceProfileBuilder;
+const aws_bedrock_1 = require("aws-cdk-lib/aws-bedrock");
+const core_1 = require("@composurecdk/core");
+const cloudformation_1 = require("@composurecdk/cloudformation");
+const inference_target_js_1 = require("./inference-target.js");
+class ApplicationInferenceProfileBuilder {
+    props = {};
+    build(scope, id, context = {}) {
+        const { source: sourceRef, inferenceProfileName, ...rest } = this.props;
+        if (!inferenceProfileName || sourceRef === undefined) {
+            throw new Error(`ApplicationInferenceProfileBuilder "${id}" requires an inferenceProfileName and a ` +
+                `source. Call .inferenceProfileName() and .source().`);
+        }
+        const source = (0, core_1.resolve)(sourceRef, context);
+        const applicationInferenceProfile = new aws_bedrock_1.CfnApplicationInferenceProfile(scope, id, {
+            ...rest,
+            inferenceProfileName,
+            modelSource: { copyFrom: (0, inference_target_js_1.sourceArn)(source, scope) },
+        });
+        return {
+            applicationInferenceProfile,
+            profile: {
+                kind: "application",
+                profileArn: applicationInferenceProfile.attrInferenceProfileArn,
+                profileId: applicationInferenceProfile.attrInferenceProfileId,
+                source,
+            },
+        };
+    }
+}
+/**
+ * Creates a builder for an {@link ApplicationInferenceProfile}, which carries
+ * the builder's tags. Pass the result's `profile` to `modelGrants.invoke`, and
+ * its `profileArn` to callers as the model id.
+ *
+ * @example
+ * ```ts
+ * createApplicationInferenceProfileBuilder()
+ *   .inferenceProfileName("support-assistant")
+ *   .source(haiku)
+ *   .tag("CostCentre", "support");
+ * ```
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/inference-profiles-create.html
+ */
+function createApplicationInferenceProfileBuilder() {
+    return (0, cloudformation_1.taggedBuilder)(ApplicationInferenceProfileBuilder);
+}
+//# sourceMappingURL=application-inference-profile-builder.js.map

package/dist/commonjs/application-inference-profile-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"application-inference-profile-builder.js","sourceRoot":"","sources":["../../src/application-inference-profile-builder.ts"],"names":[],"mappings":";;AAoFA,4FAIC;AAxFD,yDAGiC;AAEjC,6CAA8E;AAC9E,iEAAkF;AAElF,+DAAkD;AA4BlD,MAAM,kCAAkC;IACtC,KAAK,GAAqD,EAAE,CAAC;IAE7D,KAAK,CACH,KAAiB,EACjB,EAAU,EACV,UAAkC,EAAE;QAEpC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,oBAAoB,EAAE,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACxE,IAAI,CAAC,oBAAoB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,uCAAuC,EAAE,2CAA2C;gBAClF,qDAAqD,CACxD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,cAAO,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,2BAA2B,GAAG,IAAI,4CAA8B,CAAC,KAAK,EAAE,EAAE,EAAE;YAChF,GAAG,IAAI;YACP,oBAAoB;YACpB,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAA,+BAAS,EAAC,MAAM,EAAE,KAAK,CAAC,EAAE;SACpD,CAAC,CAAC;QACH,OAAO;YACL,2BAA2B;YAC3B,OAAO,EAAE;gBACP,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,2BAA2B,CAAC,uBAAuB;gBAC/D,SAAS,EAAE,2BAA2B,CAAC,sBAAsB;gBAC7D,MAAM;aACP;SACF,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,wCAAwC;IACtD,OAAO,IAAA,8BAAa,EAClB,kCAAkC,CACnC,CAAC;AACJ,CAAC"}

package/dist/commonjs/grants.d.ts

@@ -1,6 +1,18 @@
 import { type IGrantable } from "aws-cdk-lib/aws-iam";
 import { type Grant, type Resolvable } from "@composurecdk/core";
+import type { GuardrailReference } from "./guardrail-builder.js";
 import { type InferenceTarget } from "./inference-target.js";
+/** Options for {@link modelGrants.invoke}. */
+export interface ModelInvokeGrantOptions {
+    /**
+     * Requires every invocation to apply this guardrail version. The allow is
+     * conditioned on `bedrock:GuardrailIdentifier`, an explicit deny refuses
+     * calls without it, and the grantee may apply the guardrail.
+     *
+     * @see https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-permissions-id.html
+     */
+    requireGuardrail?: Resolvable<GuardrailReference>;
+}
 /**
  * Consumer-side grant helpers for invoking Amazon Bedrock models. Pass one to
  * a grantee builder's `grant(...)` — e.g.
@@ -22,6 +34,18 @@ export declare const modelGrants: {
      *
      * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec01-bp01.html
      */
-    invoke: (target: Resolvable<InferenceTarget>) => Grant<IGrantable>;
+    invoke: (target: Resolvable<InferenceTarget>, { requireGuardrail }?: ModelInvokeGrantOptions) => Grant<IGrantable>;
+};
+/**
+ * Consumer-side grant helpers for Amazon Bedrock guardrails.
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-permissions-id.html
+ */
+export declare const guardrailGrants: {
+    /**
+     * Apply the guardrail (`bedrock:ApplyGuardrail`), through the
+     * `ApplyGuardrail` API or a model invocation that names it.
+     */
+    apply: (guardrail: Resolvable<GuardrailReference>) => Grant<IGrantable>;
 };
 //# sourceMappingURL=grants.d.ts.map

package/dist/commonjs/grants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,KAAK,KAAK,EAAY,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,KAAK,eAAe,EAAiC,MAAM,uBAAuB,CAAC;AAU5F;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW;IACtB;;;;;;;;;;OAUG;qBACc,UAAU,CAAC,eAAe,CAAC,KAAG,KAAK,CAAC,UAAU,CAAC;CAOjE,CAAC"}
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/grants.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,UAAU,EAAmB,MAAM,qBAAqB,CAAC;AAClG,OAAO,EAAW,KAAK,KAAK,EAAY,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,KAAK,eAAe,EAAiC,MAAM,uBAAuB,CAAC;AAU5F,8CAA8C;AAC9C,MAAM,WAAW,uBAAuB;IACtC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;CACnD;AAmDD;;;;;;;;GAQG;AACH,eAAO,MAAM,WAAW;IACtB;;;;;;;;;;OAUG;qBAEO,UAAU,CAAC,eAAe,CAAC,yBACb,uBAAuB,KAC5C,KAAK,CAAC,UAAU,CAAC;CAOrB,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,eAAe;IAC1B;;;OAGG;uBACgB,UAAU,CAAC,kBAAkB,CAAC,KAAG,KAAK,CAAC,UAAU,CAAC;CAItE,CAAC"}

package/dist/commonjs/grants.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.modelGrants = void 0;
+exports.guardrailGrants = exports.modelGrants = void 0;
 const aws_iam_1 = require("aws-cdk-lib/aws-iam");
 const core_1 = require("@composurecdk/core");
 const inference_target_js_1 = require("./inference-target.js");
@@ -11,6 +11,46 @@ const inference_target_js_1 = require("./inference-target.js");
  * @see https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html
  */
 const INVOKE_ACTIONS = ["bedrock:InvokeModel", "bedrock:InvokeModelWithResponseStream"];
+/** The versioned identifier `bedrock:GuardrailIdentifier` carries. */
+function identifierOf(guardrail) {
+    return `${guardrail.guardrailArn}:${guardrail.version}`;
+}
+function grantInvoke(target, grantee, guardrail) {
+    const statements = (0, inference_target_js_1.invocationStatements)(target, (0, inference_target_js_1.scopeOf)(grantee.grantPrincipal));
+    const identifier = guardrail && identifierOf(guardrail);
+    for (const { resourceArns, conditions } of statements) {
+        aws_iam_1.Grant.addToPrincipal({
+            grantee,
+            actions: INVOKE_ACTIONS,
+            resourceArns,
+            conditions: identifier
+                ? {
+                    ...conditions,
+                    StringEquals: {
+                        ...conditions?.StringEquals,
+                        "bedrock:GuardrailIdentifier": identifier,
+                    },
+                }
+                : conditions,
+        });
+    }
+    if (!guardrail)
+        return;
+    grantee.grantPrincipal.addToPrincipalPolicy(new aws_iam_1.PolicyStatement({
+        effect: aws_iam_1.Effect.DENY,
+        actions: INVOKE_ACTIONS,
+        resources: statements.flatMap((s) => s.resourceArns),
+        conditions: { StringNotEquals: { "bedrock:GuardrailIdentifier": identifierOf(guardrail) } },
+    }));
+    grantApply(guardrail, grantee);
+}
+function grantApply(guardrail, grantee) {
+    aws_iam_1.Grant.addToPrincipal({
+        grantee,
+        actions: ["bedrock:ApplyGuardrail"],
+        resourceArns: [guardrail.guardrailArn],
+    });
+}
 /**
  * Consumer-side grant helpers for invoking Amazon Bedrock models. Pass one to
  * a grantee builder's `grant(...)` — e.g.
@@ -32,11 +72,22 @@ exports.modelGrants = {
      *
      * @see https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec01-bp01.html
      */
-    invoke: (target) => (0, core_1.grantVia)(target, (resolved, grantee) => {
-        const statements = (0, inference_target_js_1.invocationStatements)(resolved, (0, inference_target_js_1.scopeOf)(grantee.grantPrincipal));
-        for (const { resourceArns, conditions } of statements) {
-            aws_iam_1.Grant.addToPrincipal({ grantee, actions: INVOKE_ACTIONS, resourceArns, conditions });
-        }
+    invoke: (target, { requireGuardrail } = {}) => (0, core_1.grantVia)((0, core_1.combine)({ target, guardrail: requireGuardrail }), ({ target: resolved, guardrail }, grantee) => {
+        grantInvoke(resolved, grantee, guardrail);
+    }),
+};
+/**
+ * Consumer-side grant helpers for Amazon Bedrock guardrails.
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-permissions-id.html
+ */
+exports.guardrailGrants = {
+    /**
+     * Apply the guardrail (`bedrock:ApplyGuardrail`), through the
+     * `ApplyGuardrail` API or a model invocation that names it.
+     */
+    apply: (guardrail) => (0, core_1.grantVia)(guardrail, (resolved, grantee) => {
+        grantApply(resolved, grantee);
     }),
 };
 //# sourceMappingURL=grants.js.map

package/dist/commonjs/grants.js.map

@@ -1 +1 @@
-{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/grants.ts"],"names":[],"mappings":";;;AAAA,iDAAyE;AACzE,6CAA2E;AAC3E,+DAA4F;AAE5F;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;AAExF;;;;;;;;GAQG;AACU,QAAA,WAAW,GAAG;IACzB;;;;;;;;;;OAUG;IACH,MAAM,EAAE,CAAC,MAAmC,EAAqB,EAAE,CACjE,IAAA,eAAQ,EAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAmB,EAAE,EAAE;QACjD,MAAM,UAAU,GAAG,IAAA,0CAAoB,EAAC,QAAQ,EAAE,IAAA,6BAAO,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QACnF,KAAK,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,UAAU,EAAE,CAAC;YACtD,eAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC;CACL,CAAC"}
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/grants.ts"],"names":[],"mappings":";;;AAAA,iDAAkG;AAClG,6CAAoF;AAEpF,+DAA4F;AAE5F;;;;;GAKG;AACH,MAAM,cAAc,GAAG,CAAC,qBAAqB,EAAE,uCAAuC,CAAC,CAAC;AAcxF,sEAAsE;AACtE,SAAS,YAAY,CAAC,SAA6B;IACjD,OAAO,GAAG,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAClB,MAAuB,EACvB,OAAmB,EACnB,SAAyC;IAEzC,MAAM,UAAU,GAAG,IAAA,0CAAoB,EAAC,MAAM,EAAE,IAAA,6BAAO,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,SAAS,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;IACxD,KAAK,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,UAAU,EAAE,CAAC;QACtD,eAAQ,CAAC,cAAc,CAAC;YACtB,OAAO;YACP,OAAO,EAAE,cAAc;YACvB,YAAY;YACZ,UAAU,EAAE,UAAU;gBACpB,CAAC,CAAC;oBACE,GAAG,UAAU;oBACb,YAAY,EAAE;wBACZ,GAAG,UAAU,EAAE,YAAY;wBAC3B,6BAA6B,EAAE,UAAU;qBAC1C;iBACF;gBACH,CAAC,CAAC,UAAU;SACf,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,OAAO;IAEvB,OAAO,CAAC,cAAc,CAAC,oBAAoB,CACzC,IAAI,yBAAe,CAAC;QAClB,MAAM,EAAE,gBAAM,CAAC,IAAI;QACnB,OAAO,EAAE,cAAc;QACvB,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC;QACpD,UAAU,EAAE,EAAE,eAAe,EAAE,EAAE,6BAA6B,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,EAAE;KAC5F,CAAC,CACH,CAAC;IACF,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,SAA6B,EAAE,OAAmB;IACpE,eAAQ,CAAC,cAAc,CAAC;QACtB,OAAO;QACP,OAAO,EAAE,CAAC,wBAAwB,CAAC;QACnC,YAAY,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC;KACvC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACU,QAAA,WAAW,GAAG;IACzB;;;;;;;;;;OAUG;IACH,MAAM,EAAE,CACN,MAAmC,EACnC,EAAE,gBAAgB,KAA8B,EAAE,EAC/B,EAAE,CACrB,IAAA,eAAQ,EACN,IAAA,cAAO,EAAC,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,EAChD,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,OAAmB,EAAE,EAAE;QACvD,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC,CACF;CACJ,CAAC;AAEF;;;;GAIG;AACU,QAAA,eAAe,GAAG;IAC7B;;;OAGG;IACH,KAAK,EAAE,CAAC,SAAyC,EAAqB,EAAE,CACtE,IAAA,eAAQ,EAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAmB,EAAE,EAAE;QACpD,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC,CAAC;CACL,CAAC"}

package/dist/commonjs/guardrail-alarms.d.ts

@@ -0,0 +1,40 @@
+import { Metric, type MetricOptions } from "aws-cdk-lib/aws-cloudwatch";
+import type { AlarmConfig, AlarmDefinition } from "@composurecdk/cloudwatch";
+import type { GuardrailReference } from "./guardrail-builder.js";
+/** `AWS/Bedrock/Guardrails` metrics for one guardrail version. */
+export interface GuardrailMetrics {
+    /** A metric dimensioned by the guardrail's ARN and version. */
+    metric(metricName: string, options?: MetricOptions): Metric;
+}
+/** Returns the `AWS/Bedrock/Guardrails` metrics for `guardrail`. */
+export declare function guardrailMetrics(guardrail: GuardrailReference): GuardrailMetrics;
+/**
+ * Controls the recommended alarms for a guardrail. Both are opt-in and need a
+ * threshold: what counts as normal depends on the workload.
+ *
+ * @see https://docs.aws.amazon.com/bedrock/latest/userguide/monitoring-guardrails-cw-metrics.html
+ */
+export interface GuardrailAlarmConfig {
+    /**
+     * Master switch: set to `false` to disable all recommended alarms.
+     * @default true
+     */
+    enabled?: boolean;
+    /**
+     * Alarm when the guardrail intervenes more often than the threshold, e.g.
+     * a spike in prompt attacks or a filter set too strictly.
+     *
+     * Metric: `InvocationsIntervened`, statistic Sum. Opt-in; threshold required.
+     */
+    invocationsIntervened?: AlarmConfig | false;
+    /**
+     * Alarm when evaluating the guardrail takes longer than the threshold, in
+     * milliseconds.
+     *
+     * Metric: `InvocationLatency`, statistic p90. Opt-in; threshold required.
+     */
+    invocationLatency?: AlarmConfig | false;
+}
+/** Resolves the recommended guardrail alarms. */
+export declare function resolveGuardrailAlarmDefinitions(metrics: GuardrailMetrics, config: GuardrailAlarmConfig | false | undefined): AlarmDefinition[];
+//# sourceMappingURL=guardrail-alarms.d.ts.map

package/dist/commonjs/guardrail-alarms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail-alarms.d.ts","sourceRoot":"","sources":["../../src/guardrail-alarms.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,4BAA4B,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE7E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAEjE,kEAAkE;AAClE,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CAAC;CAC7D;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,kBAAkB,GAAG,gBAAgB,CAchF;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAE5C;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;CACzC;AAkBD,iDAAiD;AACjD,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,gBAAgB,EACzB,MAAM,EAAE,oBAAoB,GAAG,KAAK,GAAG,SAAS,GAC/C,eAAe,EAAE,CAKnB"}

package/dist/commonjs/guardrail-alarms.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.guardrailMetrics = guardrailMetrics;
+exports.resolveGuardrailAlarmDefinitions = resolveGuardrailAlarmDefinitions;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
+const aws_cloudwatch_1 = require("aws-cdk-lib/aws-cloudwatch");
+const alarm_definition_js_1 = require("./alarm-definition.js");
+/** Returns the `AWS/Bedrock/Guardrails` metrics for `guardrail`. */
+function guardrailMetrics(guardrail) {
+    return {
+        metric: (metricName, options) => new aws_cloudwatch_1.Metric({
+            namespace: "AWS/Bedrock/Guardrails",
+            metricName,
+            dimensionsMap: {
+                GuardrailArn: guardrail.guardrailArn,
+                GuardrailVersion: guardrail.version,
+            },
+            period: aws_cdk_lib_1.Duration.minutes(1),
+            ...options,
+        }),
+    };
+}
+const GUARDRAIL_ALARMS = {
+    invocationsIntervened: {
+        metricName: "InvocationsIntervened",
+        statistic: "Sum",
+        describe: (t) => `The guardrail is intervening more than ${String(t)} times a minute.`,
+    },
+    invocationLatency: {
+        metricName: "InvocationLatency",
+        statistic: "p90",
+        describe: (t) => `p90 guardrail evaluation latency exceeds ${String(t)} ms.`,
+    },
+};
+/** Resolves the recommended guardrail alarms. */
+function resolveGuardrailAlarmDefinitions(metrics, config) {
+    if (config === false || config?.enabled === false)
+        return [];
+    return (0, alarm_definition_js_1.resolveThresholdAlarms)(GUARDRAIL_ALARMS, config, (metricName, statistic) => metrics.metric(metricName, { statistic }));
+}
+//# sourceMappingURL=guardrail-alarms.js.map

package/dist/commonjs/guardrail-alarms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail-alarms.js","sourceRoot":"","sources":["../../src/guardrail-alarms.ts"],"names":[],"mappings":";;AAaA,4CAcC;AAiDD,4EAQC;AApFD,6CAAuC;AACvC,+DAAwE;AAExE,+DAAwF;AASxF,oEAAoE;AACpE,SAAgB,gBAAgB,CAAC,SAA6B;IAC5D,OAAO;QACL,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,CAC9B,IAAI,uBAAM,CAAC;YACT,SAAS,EAAE,wBAAwB;YACnC,UAAU;YACV,aAAa,EAAE;gBACb,YAAY,EAAE,SAAS,CAAC,YAAY;gBACpC,gBAAgB,EAAE,SAAS,CAAC,OAAO;aACpC;YACD,MAAM,EAAE,sBAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3B,GAAG,OAAO;SACX,CAAC;KACL,CAAC;AACJ,CAAC;AAgCD,MAAM,gBAAgB,GAGlB;IACF,qBAAqB,EAAE;QACrB,UAAU,EAAE,uBAAuB;QACnC,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,0CAA0C,MAAM,CAAC,CAAC,CAAC,kBAAkB;KACvF;IACD,iBAAiB,EAAE;QACjB,UAAU,EAAE,mBAAmB;QAC/B,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,4CAA4C,MAAM,CAAC,CAAC,CAAC,MAAM;KAC7E;CACF,CAAC;AAEF,iDAAiD;AACjD,SAAgB,gCAAgC,CAC9C,OAAyB,EACzB,MAAgD;IAEhD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IAC7D,OAAO,IAAA,4CAAsB,EAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,CAChF,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,CAAC,CAC1C,CAAC;AACJ,CAAC"}