AI-SPM
Managed AI services, read like the rest of the cloud
Bedrock, SageMaker, Vertex AI, Azure OpenAI and AI Search are inventoried by the same collectors as cloud configuration, with dedicated rules: agent without a guardrail, notebook with direct internet access, exposed key.
- What is read
- Models, agents, guardrails, notebooks, keys and network access of AI services.
- How
- Same collectors as cloud configuration, rules dedicated to AI services.
- In the application
- AI-SPM page: the findings whose rule concerns an AI service, with the same table and detail panel as cloud configuration; AI category in the policies.
What it cannot see. The AI services of Scaleway, OVHcloud and OUTSCALE are not inventoried yet; for Vertex AI, only Workbench instances are. The content of prompts and answers is never read.
Example detections
- Bedrock agent without a guardrail
- SageMaker notebook with direct internet access
- Azure OpenAI policy without prompt-injection protection
The other modules
Ready to see this module on your accounts?
The public demonstration runs on fictitious data. For an instance on your own accounts, request a demonstration.