AWS Bedrock Multi-Region Model Invocation (Quota Evasion)

Lacey Cochrane@NullVectorX

•updated 28 days ago•1•0•3

Detects anomalous AWS Bedrock model invocation patterns where a single identity accesses models across three or more distinct AWS regions within a short timeframe. This behavior is indicative of quota evasion, where attackers bypass per-region rate limits to maximize throughput when leveraging compromised credentials for unauthorized LLM use.