---
type: resource-type
title: Guardrail
description: aws resource type AWS::Bedrock::Guardrail
name: Guardrail
lexicon: aws
resource_type: AWS::Bedrock::Guardrail
---
`AWS::Bedrock::Guardrail`, a resource type of the aws lexicon.

## Properties

- `BlockedInputMessaging` (`string`, required): Messaging for when violations are detected in text
- `BlockedOutputsMessaging` (`string`, required): Messaging for when violations are detected in text
- `Name` (`string`, required): Name of the guardrail
- `AutomatedReasoningPolicyConfig` (`Guardrail_AutomatedReasoningPolicyConfig`, optional)
- `ContentPolicyConfig` (`Guardrail_ContentPolicyConfig`, optional)
- `ContextualGroundingPolicyConfig` (`Guardrail_ContextualGroundingPolicyConfig`, optional)
- `CreatedAt` (`string`, optional): Time Stamp
- `CrossRegionConfig` (`Guardrail_GuardrailCrossRegionConfig`, optional)
- `Description` (`string`, optional): Description of the guardrail or its version
- `FailureRecommendations` (`string[]`, optional): List of failure recommendations
- `GuardrailArn` (`string`, optional): Arn representation for the guardrail
- `GuardrailId` (`string`, optional): Unique id for the guardrail
- `KmsKeyArn` (`string`, optional): The KMS key with which the guardrail was encrypted at rest
- `SensitiveInformationPolicyConfig` (`Guardrail_SensitiveInformationPolicyConfig`, optional)
- `Status` (`Guardrail_GuardrailStatus`, optional)
- `StatusReasons` (`string[]`, optional): List of status reasons
- `Tags` (`Guardrail_Tag[]`, optional): List of Tags
- `TopicPolicyConfig` (`Guardrail_TopicPolicyConfig`, optional)
- `UpdatedAt` (`string`, optional): Time Stamp
- `Version` (`string`, optional): Guardrail version
- `WordPolicyConfig` (`Guardrail_WordPolicyConfig`, optional)

## Attributes

- `CreatedAt`
- `FailureRecommendations`
- `GuardrailArn`
- `GuardrailId`
- `Status`
- `StatusReasons`
- `UpdatedAt`
- `Version`

## Governed by

- [WAW056](/rules/WAW056.md): SCP guardrail has no Deny statement — it constrains nothing
- [WAW057](/rules/WAW057.md): SCP guardrail is attached to no targets — it enforces nothing