Overview
AI Guardian
See how AI Guardian gives security, compliance and finance teams one control plane for Amazon Bedrock: policy enforcement, data protection, cost control and usage visibility.
AI Guardian is an enterprise AI governance platform that gives organizations a secure, controlled way to adopt generative AI and AI agents on Amazon Bedrock. As enterprises scale AI adoption, they face shadow AI usage, unpredictable model spend, sensitive data exposure, and limited visibility into how employees and agents use AI. AI Guardian addresses these challenges by acting as a centralized control plane: every model request and agent interaction passes through a single, policy-enforced gateway before reaching Amazon Bedrock models. Key capabilities: Centralized policy enforcement - Define and enforce organization-wide AI usage policies from one place, applied consistently to every model and agent interaction. Cost governance - Track and control AI spend by model, department, and user, with budget visibility that helps finance teams prevent unexpected costs. Data protection and compliance - Apply data protection controls to prompts and responses, and maintain a full record of AI activity to support audit and regulatory requirements. ChatBuddy enterprise chat - A secure, governed AI chat interface that gives employees productive access to generative AI without bypassing organizational controls. Agent management - Register, govern, and monitor AI agents and agentic workflows, with visibility into usage, cost, and behavior. Usage analytics - Dashboards showing model usage, adoption trends, and cost across the organization. AI Guardian is deployed natively on AWS, so customer data stays within the AWS environment and builds on AWS security, scalability, and reliability. AI Guardian is built for CIOs, CISOs, compliance officers, and finance leaders. It lets organizations say yes to AI while staying secure, compliant, and within budget.
Highlights
- Single policy-enforced control plane for Amazon Bedrock model and agent traffic: identity-aware access (SSO, RBAC), policy-based routing, department and role policies, and model allow/block lists.
- Data protection and cost control: PII redaction at capture, prompt-injection shielding, secrets blocking, content moderation, plus cost and token metering with quotas and budgets by department.
- Audit-ready governance: real-time dashboards, prompt history and traces, and identity-attributed audit evidence with SIEM/CSV export, deployed inside your own cloud with tenant isolation and data residency controls.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
Refund requests for AI Guardian contracts will be reviewed case by case. For more details contact Folio3 at contact@folio3ai.com .
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
AI Guardian platform on Amazon ECS (Fargate)
- Amazon ECS
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
Initial release of AI Guardian: a governed AI assistant for Amazon Bedrock with policy enforcement, guardrails (content safety, PII redaction, prompt-injection and off-topic checks), per-user model access and spending limits, and an admin console.
Additional details
Usage instructions
Prerequisites: an AWS account with Amazon Bedrock model access enabled in your Region; a VPC with private subnets; Amazon Aurora PostgreSQL, Amazon SQS, Amazon S3 and AWS Secrets Manager; an identity provider connected through Amazon Cognito, such as Okta, for user sign-in; and the two AI Guardian agents from this product's Amazon Bedrock AgentCore delivery options.
- Subscribe to this product, then pull the six images above.
- Create the database, queues and storage bucket, and store AI Guardian's service connection settings in AWS Secrets Manager.
- Run each image as an Amazon ECS service on AWS Fargate. Give each service its own ECS task IAM role (taskRoleArn) with only the permissions it needs, and a task execution role that can read its AWS Secrets Manager entries. Ports: channels 8000, model proxy 8100, data service 8200, console 8300, orchestrator 3000 (health check only); the ETL worker has no port.
- Deploy the answer agent and the policy agent on Amazon Bedrock AgentCore (see their delivery options), and set the orchestrator's ANSWER_AGENT_URL and POLICY_AGENT_URL to agentcore://<runtime ARN>.
- Open the web chat at your domain, and the admin console at /admin.
IAM: all AWS access uses IAM roles: the ECS task role of each service and the AgentCore Runtime execution role of each agent.
Data and encryption: AI Guardian keeps all data in your own AWS account: conversations, policies and usage in Amazon Aurora PostgreSQL (with storage encryption enabled), uploaded and redacted files in Amazon S3 (server-side encryption), and service connection settings in AWS Secrets Manager. Users reach it over HTTPS through Amazon CloudFront and the load balancer.
Health and monitoring: every service except the ETL worker answers GET /healthz (the console at /admin/healthz behind the load balancer). Check the load balancer's target health and each ECS service's status in the Amazon ECS console; logs go to Amazon CloudWatch Logs.
Costs and quotas: AI Guardian is BYOL. The AWS resources it uses are billed to your account by AWS: AWS Fargate, Amazon Aurora, Amazon SQS, Amazon S3, Amazon CloudFront, the load balancer, AWS Secrets Manager, Amazon Bedrock model usage, Amazon Bedrock AgentCore Runtime and Amazon Comprehend. Check your Amazon Bedrock model quotas (tokens and requests per minute) in Service Quotas and request increases before rolling out to many users.
Support: contact@folio3.com
Resources
Vendor resources
Support
Vendor support
For support inquiries related to AI Guardian, including setup assistance, troubleshooting, usage questions, and refund requests, please contact the Folio3 support team at contact@folio3.com . The team can assist with deployment, configuration, policy setup, and ongoing operational questions for your AI Guardian environment.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products

