When you invoke an AI model in Bedrock, it writes the conversation to a single CloudTrail log group. Disambiguating the logs is left as homework for the admins (read: It work bad.). I implemented a firehose to harvest cloudtrail logs, extract the information we care about in Splunk events.
3 likes 1 replies
?