DFIR + AI Primer: Using AI in AWS Bedrock For Better Data Protection
Brief
For organizations concerned with where their investigation data goes, using LLMs inside their cloud environment (such as AWS or Azure) is a better-performing option than having local LLMs. When you use models in your cloud provider, then no data is seen by the GenAI vendors.
We already talked about using Anthropic’s servers and local LLMs. In this post, we’ll cover how to configure your AWS account to run models and how to connect your MCP server, such as Autopsy or Cyber Triage, to them. This process should work with GovCloud , but we have not tested it.
Using AI Models in AWS, Azure, or Google
All cloud providers offer frameworks that can run various AI models, including Claude and ChatGPT.
These frameworks have names like:
- AWS Bedrock
- Azure Foundry
- Google Vertex ( Gemini Enterprise Agent Platform)
When using these, none of your data ever goes to the GenAI vendor.