- Newest
- Most votes
- Most comments
In your situation, where you're using Consolidated Billing and can't apply an AI services opt-out policy at the organizational level, you still have options to protect your client data from being used for AI training. Here's what you can do:
-
Account-Level Opt-Out: Even though you can't apply the opt-out at the organization level, you can still opt out at the individual account level. This means you'll need to configure the opt-out settings for each AWS account where you're using services like AWS Textract and Amazon Bedrock.
-
Service-Specific Opt-Out: For each account, you can create opt-out policies for individual AI services. This allows you to specifically opt out of data usage for AWS Textract and Amazon Bedrock, while potentially allowing other AI services to use data if needed.
-
AWS CLI or SDK Implementation: You can use the AWS Command Line Interface (CLI) or Software Development Kits (SDKs) to programmatically create and apply these opt-out policies to your accounts. This can be particularly useful if you need to manage multiple accounts.
-
Regular Audits: Since you're managing this at the account level, it's important to regularly audit your accounts to ensure the opt-out policies are correctly applied, especially when creating new accounts or starting to use new AI services.
-
Data Processing Agreements: In addition to technical measures, consider reviewing and updating your data processing agreements with AWS to explicitly state your requirements regarding data usage for AI training.
-
Alternative Service Configurations: Some AWS AI services may offer configuration options that limit data usage. Check the specific documentation for AWS Textract and Amazon Bedrock to see if they offer such options.
Remember, while these steps can help protect your data, it's crucial to stay informed about AWS's evolving policies and service features related to data usage and AI training. Regularly review your settings and AWS's documentation to ensure ongoing compliance with your data security requirements.
Sources
Opt out from all supported AWS AI services - AWS Organizations
AI services opt-out policies - AWS Organizations
AI services opt-out policy syntax and examples - AWS Organizations
Creating organization policies with AWS Organizations - AWS Organizations
From the AI generated recommendation, I'd need help understanding how I can do account level or service level opting out. Not sure where this is located.
Relevant content
- asked 3 years ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 5 months ago
Hi - is there any more specific advice other than the AI generated content. I cannot seem to enable creating the policy under a consolidated billing organisation. There has to be some IAM/account level method to do this?