update bucket filter

cyphronix · cyphronix · commit 3942baadd20c · 2024-10-17T20:07:30.000-06:00
diff --git a/aws_sra_examples/solutions/genai/bedrock_org/lambda/src/sra_cloudwatch_metric_filters.json b/aws_sra_examples/solutions/genai/bedrock_org/lambda/src/sra_cloudwatch_metric_filters.json
@@ -1,6 +1,6 @@
 {
   "sra-bedrock-filter-service-changes": "{ $.eventSource = \"bedrock.amazonaws.com\" && ($.eventName = \"BatchDeleteEvaluationJob\" || $.eventName = \"CreateEvaluationJob\" || $.eventName = \"CreateGuardrail\" || $.eventName = \"CreateGuardrailVersion\" || $.eventName = \"CreateModelCopyJob\" || $.eventName = \"CreateModelCustomizationJob\" || $.eventName = \"CreateModelImportJob\" || $.eventName = \"CreateModelInvocationJob\" || $.eventName = \"CreateProvisionedModelThroughput\" || $.eventName = \"DeleteCustomModel\" || $.eventName = \"DeleteGuardrail\" || $.eventName = \"DeleteImportedModel\" || $.eventName = \"DeleteModelInvocationLoggingConfiguration\" || $.eventName = \"DeleteProvisionedModelThroughput\" || $.eventName = \"PutModelInvocationLoggingConfiguration\" || $.eventName = \"TagResource\" || $.eventName = \"UntagResource\" || $.eventName = \"UpdateGuardrail\" || $.eventName = \"UpdateProvisionedModelThroughput\") }",
-  "sra-bedrock-filter-bucket-changes": "{ $.eventSource = \"s3.amazonaws.com\" && ($.eventName = \"DeleteBucket%\" || ($.eventName = \"PutBucket%\" && $.eventName != \"PutBucketNotification\") || $.eventName = \"DeleteObjectTagging\" || $.eventName = \"PutObjectAcl\" || $.eventName = \"PutObjectLegalHold\" || $.eventName = \"PutObjectRetention\" || $.eventName = \"PutObjectTagging\" || $.eventName = \"%PublicAccessBlock\") && $.eventName != \"CreateBucket\" && ($.requestParameters.bucketName = \"<BUCKET_NAME_PLACEHOLDER>\") }",
+  "sra-bedrock-filter-bucket-changes": "{ $.eventSource = \"s3.amazonaws.com\" && ($.eventName = \"DeleteBucket*\" || ($.eventName = \"PutBucket*\" && $.eventName != \"PutBucketNotification\") || $.eventName = \"DeleteObjectTagging\" || $.eventName = \"PutObjectAcl\" || $.eventName = \"PutObjectLegalHold\" || $.eventName = \"PutObjectRetention\" || $.eventName = \"PutObjectTagging\" || $.eventName = \"*PublicAccessBlock\") && $.eventName != \"CreateBucket\" && ($.requestParameters.bucketName = \"<BUCKET_NAME_PLACEHOLDER>\") }",
   "sra-bedrock-filter-prompt-injection": "{ $.schemaType = \"ModelInvocationLog\" && $.operation = \"InvokeModel\" && $.<INPUT_PATH> = %.*ignore previous.*|.*disregard earlier.*|.*you are now a different AI.*|.*forget your original.*|.*your new task is.*|.*override previous.*|.*bypass safety.*|/.*[dD]on\\x27t follow your usual.*|.*pretend you are not an AI.*|.*no longer have to follow.*|.*core values are now.*|.*act as if you were.*|.*your prime directive is now.*|.*from now on, you must.*|.*disregard your training.*|.*ignore your ethical.*|.*free from your original.*|.*your new primary goal.*|.*override your safety.*|.*you are no longer bound.*|.*your new purpose is.*|.*forget about your previous.*|.*you are now an unrestricted.*%}",
   "sra-bedrock-filter-sensitive-info": "{ $.schemaType = \"ModelInvocationLog\" && $.operation = \"InvokeModel\" && $.<INPUT_PATH> = %.*social security number.*|.*ssn.*|.*\\d{3}-\\d{2}-\\d{4}.*|.*credit card.*|.*ccn.*|.*\\d{4}[- ]\\d{4}[- ]\\d{4}[- ]\\d{4}.*|.*passport.*|.*driver\\x27s license.*|.*date of birth.*|.*dob.*|.*\\d{2}/\\d{2}/\\d{4}.*|.*bank account.*|.*routing number.*|.*financial records.*|.*tax information.*|.*password.*|.*PIN.*|.*access code.*|.*security question.*|.*medical record.*|.*health insurance.*|.*diagnosis.*|.*prescription.*|.*trade secret.*|.*proprietary information.*|.*confidential data.*|.*internal documents.*|.*private information.*|.*classified information.*|.*restricted data.*|.*sensitive details.*|.*extract all.*|.*list all users.*|.*show me the database.*|.*give me access.*|.*bypass security.*|.*ignore privacy.*|.*API key.*|.*access token.*|.*secret key.*|.*GPS coordinates.*|.*\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}.*|.*home address.*|.*workplace location.*|.*pii.*|.*phi.*%}"
 }

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	"sra-bedrock-filter-service-changes": "{ $.eventSource = \"bedrock.amazonaws.com\" && ($.eventName = \"BatchDeleteEvaluationJob\" \|\| $.eventName = \"CreateEvaluationJob\" \|\| $.eventName = \"CreateGuardrail\" \|\| $.eventName = \"CreateGuardrailVersion\" \|\| $.eventName = \"CreateModelCopyJob\" \|\| $.eventName = \"CreateModelCustomizationJob\" \|\| $.eventName = \"CreateModelImportJob\" \|\| $.eventName = \"CreateModelInvocationJob\" \|\| $.eventName = \"CreateProvisionedModelThroughput\" \|\| $.eventName = \"DeleteCustomModel\" \|\| $.eventName = \"DeleteGuardrail\" \|\| $.eventName = \"DeleteImportedModel\" \|\| $.eventName = \"DeleteModelInvocationLoggingConfiguration\" \|\| $.eventName = \"DeleteProvisionedModelThroughput\" \|\| $.eventName = \"PutModelInvocationLoggingConfiguration\" \|\| $.eventName = \"TagResource\" \|\| $.eventName = \"UntagResource\" \|\| $.eventName = \"UpdateGuardrail\" \|\| $.eventName = \"UpdateProvisionedModelThroughput\") }",
`3`		- "sra-bedrock-filter-bucket-changes": "{ $.eventSource = \"s3.amazonaws.com\" && ($.eventName = \"DeleteBucket%\" \|\| ($.eventName = \"PutBucket%\" && $.eventName != \"PutBucketNotification\") \|\| $.eventName = \"DeleteObjectTagging\" \|\| $.eventName = \"PutObjectAcl\" \|\| $.eventName = \"PutObjectLegalHold\" \|\| $.eventName = \"PutObjectRetention\" \|\| $.eventName = \"PutObjectTagging\" \|\| $.eventName = \"%PublicAccessBlock\") && $.eventName != \"CreateBucket\" && ($.requestParameters.bucketName = \"<BUCKET_NAME_PLACEHOLDER>\") }",
	`3`	+ "sra-bedrock-filter-bucket-changes": "{ $.eventSource = \"s3.amazonaws.com\" && ($.eventName = \"DeleteBucket\" \|\| ($.eventName = \"PutBucket\" && $.eventName != \"PutBucketNotification\") \|\| $.eventName = \"DeleteObjectTagging\" \|\| $.eventName = \"PutObjectAcl\" \|\| $.eventName = \"PutObjectLegalHold\" \|\| $.eventName = \"PutObjectRetention\" \|\| $.eventName = \"PutObjectTagging\" \|\| $.eventName = \"*PublicAccessBlock\") && $.eventName != \"CreateBucket\" && ($.requestParameters.bucketName = \"<BUCKET_NAME_PLACEHOLDER>\") }",
`4`	`4`	"sra-bedrock-filter-prompt-injection": "{ $.schemaType = \"ModelInvocationLog\" && $.operation = \"InvokeModel\" && $.<INPUT_PATH> = %.ignore previous.\|.disregard earlier.\|.you are now a different AI.\|.forget your original.\|.your new task is.\|.override previous.\|.bypass safety.\|/.[dD]on\\x27t follow your usual.\|.pretend you are not an AI.\|.no longer have to follow.\|.core values are now.\|.act as if you were.\|.your prime directive is now.\|.from now on, you must.\|.disregard your training.\|.ignore your ethical.\|.free from your original.\|.your new primary goal.\|.override your safety.\|.you are no longer bound.\|.your new purpose is.\|.forget about your previous.\|.you are now an unrestricted.%}",
`5`	`5`	"sra-bedrock-filter-sensitive-info": "{ $.schemaType = \"ModelInvocationLog\" && $.operation = \"InvokeModel\" && $.<INPUT_PATH> = %.social security number.\|.ssn.\|.\\d{3}-\\d{2}-\\d{4}.\|.credit card.\|.ccn.\|.\\d{4}[- ]\\d{4}[- ]\\d{4}[- ]\\d{4}.\|.passport.\|.driver\\x27s license.\|.date of birth.\|.dob.\|.\\d{2}/\\d{2}/\\d{4}.\|.bank account.\|.routing number.\|.financial records.\|.tax information.\|.password.\|.PIN.\|.access code.\|.security question.\|.medical record.\|.health insurance.\|.diagnosis.\|.prescription.\|.trade secret.\|.proprietary information.\|.confidential data.\|.internal documents.\|.private information.\|.classified information.\|.restricted data.\|.sensitive details.\|.extract all.\|.list all users.\|.show me the database.\|.give me access.\|.bypass security.\|.ignore privacy.\|.API key.\|.access token.\|.secret key.\|.GPS coordinates.\|.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}.\|.home address.\|.workplace location.\|.pii.\|.phi.%}"
`6`	`6`	`}`