Agentic Playbook
Guide for declaratively defining agent workflows like IaC and automating compliance
16 docs tagged with "compliance"
View all tagsAI Gateway Guardrails
LLM Gateway-level Guardrails — PII redaction, prompt injection defense, content filtering, tool comparison, and Korean financial compliance mapping
AI Regulatory Compliance Framework
AIDLC integration guide for 4 frameworks: EU AI Act, NIST AI RMF, ISO/IEC 42001, and Korea AI Basic Act
Audit & Governance Logging
AIDLC Checkpoint Approval gates and ISO 8601-based audit logs — Implementation guide for AIDLC audit trails in regulated industries
Enterprise Compliance Framework
Compliance guide mapping SOC2, ISO27001, Electronic Financial Supervisory Regulation (전자금융감독규정), and ISMS-P to AI operations
EU AI Act — High-Risk AI System Regulation
EU AI Act risk classification, High-risk AI obligations, GPAI provider duties, and AIDLC integration guide
Extension System
AWS Labs AIDLC Extension System — integrate organization-specific security, compliance, and domain rules into AIDLC workflows via opt-in mechanism
Governance · Evaluation · Compliance
Comprehensive governance documentation covering quality evaluation, operational playbooks, AI Gateway guardrails, compliance, and domain customization
Korea AI Basic Act — High-Impact AI Regulation and Generative AI Labeling
Korea AI Basic Act's high-impact AI impact assessment, generative AI labeling obligations, PIPA/ISMS-P cross-compliance, and AIDLC integration guide
NIST AI RMF — AI Risk Management in AIDLC
AI RMF 1.0, the Generative AI Profile, accurate Core mappings, policy history, and practical AIDLC records
Open-Weight Model Deployment Guide
A customer-facing decision guide for evaluating and choosing self-hosted open-weight LLM deployment from the perspectives of token economics and data sovereignty.
Operations & Governance
AI platform monitoring, observability, evaluation, compliance, and domain-specific operations guide
Regulatory Compliance Implementation Guide
Practical implementation guide and phased adoption roadmap for integrating regulatory requirements into AIDLC process
ROSA Security Compliance Console Access Control
A design for validating identity, permissions, MFA, login restrictions, and session controls across Hybrid Cloud Console, AWS, and OpenShift
Security & Governance
EKS security governance best practices covering API Server authentication/authorization, Identity-First security, policy management, supply chain security, threat detection, and compliance
Sovereign & Hybrid Deployment: Data Sovereignty and Region Enforcement
Agentic AI deployment strategies that meet data sovereignty requirements — SCP region enforcement, Bedrock Geographic cross-Region inference, and EKS Hybrid Nodes-based hybrid/in-country self-hosting