Archived policy snapshot
A point-in-time capture of a provider policy page cited in our data-use posture. It is kept so a claim stays provable if the provider later edits or removes the page. The captured page is shown below as plain text, never as live markup, so nothing in it can run.
Download the exact captured bytes,
then verify them with
shasum -a 256 <file> and compare to the SHA-256 above.
The download is the unmodified capture, so the digest matches it exactly.
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>Data retention - Amazon Bedrock</title><meta name="viewport" content="width=device-width,initial-scale=1" /><meta name="assets_root" content="/assets" /><meta name="target_state" content="data-retention" /><meta name="default_state" content="data-retention" /><link rel="icon" type="image/ico" href="/assets/images/favicon.ico" /><link rel="shortcut icon" type="image/ico" href="/assets/images/favicon.ico" /><link rel="canonical" href="https://docs.aws.amazon.com/bedrock/latest/userguide/data-retention.html" /><meta name="description" content="Amazon Bedrock gives you explicit control over whether the prompts and outputs from your inference requests are retained. You can configure data retention in a given AWS Region at the account level or project level, and the setting is enforced consistently across the Messages, Chat Completions, and Responses APIs. The setting is per-Region: it governs every request in the Region where you set it and does not propagate to other Regions. A Region you have not configured remains at" /><meta name="deployment_region" content="IAD" /><meta name="product" content="Amazon Bedrock" /><meta name="guide" content="User Guide" /><meta name="abstract" content="User Guide for the Amazon Bedrock service." /><meta name="guide-locale" content="en_us" /><meta name="tocs" content="toc-contents.json" /><link rel="canonical" href="https://docs.aws.amazon.com/bedrock/latest/userguide/data-retention.html" /><link rel="alternate" href="https://docs.aws.amazon.com/id_id/bedrock/latest/userguide/data-retention.html" hreflang="id-id" /><link rel="alternate" href="https://docs.aws.amazon.com/id_id/bedrock/latest/userguide/data-retention.html" hreflang="id" /><link rel="alternate" href="https://docs.aws.amazon.com/de_de/bedrock/latest/userguide/data-retention.html" hreflang="de-de" /><link rel="alternate" href="https://docs.aws.amazon.com/de_de/bedrock/latest/userguide/data-retention.html" hreflang="de" /><link rel="alternate" href="https://docs.aws.amazon.com/bedrock/latest/userguide/data-retention.html" hreflang="en-us" /><link rel="alternate" href="https://docs.aws.amazon.com/bedrock/latest/userguide/data-retention.html" hreflang="en" /><link rel="alternate" href="https://docs.aws.amazon.com/es_es/bedrock/latest/userguide/data-retention.html" hreflang="es-es" /><link rel="alternate" href="https://docs.aws.amazon.com/es_es/bedrock/latest/userguide/data-retention.html" hreflang="es" /><link rel="alternate" href="https://docs.aws.amazon.com/fr_fr/bedrock/latest/userguide/data-retention.html" hreflang="fr-fr" /><link rel="alternate" href="https://docs.aws.amazon.com/fr_fr/bedrock/latest/userguide/data-retention.html" hreflang="fr" /><link rel="alternate" href="https://docs.aws.amazon.com/it_it/bedrock/latest/userguide/data-retention.html" hreflang="it-it" /><link rel="alternate" href="https://docs.aws.amazon.com/it_it/bedrock/latest/userguide/data-retention.html" hreflang="it" /><link rel="alternate" href="https://docs.aws.amazon.com/ja_jp/bedrock/latest/userguide/data-retention.html" hreflang="ja-jp" /><link rel="alternate" href="https://docs.aws.amazon.com/ja_jp/bedrock/latest/userguide/data-retention.html" hreflang="ja" /><link rel="alternate" href="https://docs.aws.amazon.com/ko_kr/bedrock/latest/userguide/data-retention.html" hreflang="ko-kr" /><link rel="alternate" href="https://docs.aws.amazon.com/ko_kr/bedrock/latest/userguide/data-retention.html" hreflang="ko" /><link rel="alternate" href="https://docs.aws.amazon.com/pt_br/bedrock/latest/userguide/data-retention.html" hreflang="pt-br" /><link rel="alternate" href="https://docs.aws.amazon.com/pt_br/bedrock/latest/userguide/data-retention.html" hreflang="pt" /><link rel="alternate" href="https://docs.aws.amazon.com/zh_cn/bedrock/latest/userguide/data-retention.html" hreflang="zh-cn" /><link rel="alternate" href="https://docs.aws.amazon.com/zh_tw/bedrock/latest/userguide/data-retention.html" hreflang="zh-tw" /><link rel="alternate" href="https://docs.aws.amazon.com/bedrock/latest/userguide/data-retention.html" hreflang="x-default" /><meta name="feedback-folder" content="2d8c2a09-1dac-41bf-9893-c0333d272b2c" /><meta name="feedback-item" content="Bedrock" /><meta name="this_doc_product" content="Amazon Bedrock" /><meta name="this_doc_guide" content="User Guide" /><head xmlns="http://www.w3.org/1999/xhtml"> <script defer="" src="/assets/r/awsdocs-doc-page.2.0.0.js"></script><link href="/assets/r/awsdocs-doc-page.2.0.0.css" rel="stylesheet"/></head>
<script defer="" id="awsc-panorama-bundle" type="text/javascript" src="https://prod.pa.cdn.uis.awsstatic.com/panorama-nav-init.js" data-config="{'appEntity':'aws-documentation','region':'us-east-1','service':'bedrock'}"></script><meta id="panorama-serviceSubSection" value="User Guide" /><meta id="panorama-serviceConsolePage" value="Data retention" /></head><body class="awsdocs awsui"><div class="awsdocs-container"><p><a href="data-retention.md">View a markdown version of this page</a></p><awsdocs-header></awsdocs-header><awsui-app-layout id="app-layout" class="awsui-util-no-gutters" ng-controller="ContentController as $ctrl" header-selector="awsdocs-header" navigation-hide="false" navigation-width="$ctrl.navWidth" navigation-open="$ctrl.navOpen" navigation-change="$ctrl.onNavChange($event)" tools-hide="$ctrl.hideTools" tools-width="$ctrl.toolsWidth" tools-open="$ctrl.toolsOpen" tools-change="$ctrl.onToolsChange($event)"><div id="guide-toc" dom-region="navigation"><awsdocs-toc></awsdocs-toc></div><div id="main-column" dom-region="content" tabindex="-1"><awsdocs-view class="awsdocs-view"><div id="awsdocs-content"><head><title>Data retention - Amazon Bedrock</title><meta name="pdf" content="/pdfs/bedrock/latest/userguide/bedrock-ug.pdf#data-retention" /><meta name="rss" content="bedrock-ug.rss" /><meta name="forums" content="https://repost.aws/tags/TAQeKlaPaNRQ2tWB6P7KrMag" /><meta name="feedback" content="https://docs.aws.amazon.com/forms/aws-doc-feedback?feedback_destination_id=2d8c2a09-1dac-41bf-9893-c0333d272b2c&topic_url=https://docs.aws.amazon.com/en_us/bedrock/latest/userguide/data-retention.html" /><meta name="feedback-yes" content="feedbackyes.html?topic_url=https://docs.aws.amazon.com/en_us/bedrock/latest/userguide/data-retention.html" /><meta name="feedback-no" content="feedbackno.html?topic_url=https://docs.aws.amazon.com/en_us/bedrock/latest/userguide/data-retention.html" /><meta name="keywords" content="Amazon Bedrock,bedrock" /><link rel="alternate" type="text/markdown" href="data-retention.md" title="Markdown version" /><script type="application/ld+json">
{
"@context" : "https://schema.org",
"@type" : "BreadcrumbList",
"itemListElement" : [
{
"@type" : "ListItem",
"position" : 1,
"name" : "AWS",
"item" : "https://aws.amazon.com"
},
{
"@type" : "ListItem",
"position" : 2,
"name" : "Amazon Bedrock",
"item" : "https://docs.aws.amazon.com/bedrock/index.html"
},
{
"@type" : "ListItem",
"position" : 3,
"name" : "User Guide",
"item" : "https://docs.aws.amazon.com/bedrock/latest/userguide"
},
{
"@type" : "ListItem",
"position" : 4,
"name" : "Security, Guardrails, and Observability in Amazon Bedrock",
"item" : "https://docs.aws.amazon.com/bedrock/latest/userguide/security.html"
},
{
"@type" : "ListItem",
"position" : 5,
"name" : "Security",
"item" : "https://docs.aws.amazon.com/bedrock/latest/userguide/security-overview.html"
},
{
"@type" : "ListItem",
"position" : 6,
"name" : "Data protection",
"item" : "https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html"
},
{
"@type" : "ListItem",
"position" : 7,
"name" : "Data retention",
"item" : "https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html"
}
]
}
</script></head><body><div id="main"><div style="display: none"><a href="/pdfs/bedrock/latest/userguide/bedrock-ug.pdf#data-retention" target="_blank" rel="noopener noreferrer" title="Open PDF"></a></div><div id="breadcrumbs" class="breadcrumb"><a href="/index.html">Documentation</a><a href="/bedrock/index.html">Amazon Bedrock</a><a href="what-is-bedrock.html">User Guide</a></div><div id="page-toc-src"><a href="#data-retention-overview">Overview</a><a href="#data-retention-modes">Data retention modes</a><a href="#data-retention-mode-ordering">How modes are ordered</a><a href="#data-retention-resolution">How your retention mode is determined</a><a href="#data-retention-configuration">Configuring data retention</a><a href="#data-retention-model-availability">Model availability and data retention</a><a href="#data-retention-zdr">Zero data retention (ZDR) access</a><a href="#data-retention-iam">Enforcing retention policy with IAM</a><a href="#data-retention-what-is-retained">What data is retained and for how long</a><a href="#data-retention-iam-reference">IAM actions reference</a></div><div id="main-content" class="awsui-util-container"><div id="main-col-body"><awsdocs-language-banner data-service="$ctrl.pageService"></awsdocs-language-banner><h1 class="topictitle" id="data-retention">Data retention</h1><div class="awsdocs-page-header-container"><awsdocs-page-header></awsdocs-page-header><awsdocs-filter-selector id="awsdocs-filter-selector"></awsdocs-filter-selector></div>
<h2 id="data-retention-overview">Overview</h2>
<p>Amazon Bedrock gives you explicit control over whether the prompts and outputs from your inference requests are retained. You can configure data retention in a given AWS Region at the account level or project level, and the setting is enforced consistently across the Messages, Chat Completions, and Responses APIs. The setting is per-Region: it governs every request in the Region where you set it and does not propagate to other Regions. A Region you have not configured remains at <code class="code">inherit</code> and falls back to each model's default.</p>
<p>Your data retention configuration is yours to manage. If your account in a specific Region or project is configured for zero data retention (<code class="code">data_retention_mode: none</code>) and you invoke a model that requires retention, Amazon Bedrock will block the request and return an error — you always control your retention policy.</p>
<div class="awsdocs-note awsdocs-important"><div class="awsdocs-note-title"><awsui-icon name="status-warning" variant="error"></awsui-icon><h6>Important</h6></div><div class="awsdocs-note-text"><p>There is no data retention change to Claude models released before Claude Fable 5. We are committed to ensuring you are in full control over when and with whom your data is retained and shared. For a full list of models requiring data retention, see <a href="abuse-detection.html" rel="noopener noreferrer" target="_blank">Amazon Bedrock abuse detection</a>.</p></div></div>
<h2 id="data-retention-modes">Data retention modes</h2>
<p>Data retention is controlled by a <b>mode</b> rather than a simple on/off toggle:</p>
<div class="table-container"><div class="table-contents"><table id="w649aac20c13b8c21b7b5"><thead>
<tr>
<th><b>Mode</b></th>
<th><b>Behavior</b></th>
</tr>
</thead>
<tr>
<td tabindex="-1"><code class="code">none</code></td>
<td tabindex="-1">Zero data retention. No request or response data is written to durable storage by AWS or shared with the model provider. On the Responses API, <code class="code">store</code> defaults to <code class="code">false</code> and <code class="code">store=true</code> is rejected. Background mode is not available. Chat Completions and Messages requests are never retained.</td>
</tr>
<tr>
<td tabindex="-1"><code class="code">default</code></td>
<td tabindex="-1"><p>Default means the data retention policy of the model applies. There is no change to previous model retention behavior; if ZDR applied previously, then ZDR still applies. Actual retention depends on the model — consult the model's terms for specifics. AWS may retain the data for safety and abuse-prevention purposes. The model provider does not receive it. On the Responses API, <code class="code">store</code> defaults to <code class="code">true</code> and may be set to either value.</p>
<div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"></awsui-icon><h6>Note</h6></div><div class="awsdocs-note-text"><p>Setting <code class="code">store=false</code> does not guarantee zero data retention. Some models may still retain data for safety review even when <code class="code">store=false</code> — in this case, data is retained but is not retrievable by the customer through <code class="code">GET /v1/responses/<span>{</span>id}</code>. If you require guaranteed zero retention, set <code class="code">data_retention_mode</code> to <code class="code">none</code>.</p></div></div></td>
</tr>
<tr>
<td tabindex="-1"><code class="code">aws_review</code></td>
<td tabindex="-1"><p>This mode allows your inputs and outputs to be retained for human review by AWS. Review is carried out by AWS within the AWS boundary — the model provider does not review your content, and your content is not shared with the provider. Some model providers require Amazon to conduct human review as a condition of access to their models, and this mode is required for access to those models. If a model does not require human review, AWS will not review your content.</p>
<p>See <a href="abuse-detection.html" rel="noopener noreferrer" target="_blank">Amazon Bedrock abuse detection</a> and <a href="https://aws.amazon.com/service-terms/" rel="noopener noreferrer" target="_blank"><span>AWS Service Terms</span><awsui-icon class="awsdocs-link-icon" name="external"></awsui-icon></a>.</p></td>
</tr>
<tr>
<td tabindex="-1"><p><code class="code">provider_data_share</code></p><p><b>(legacy)</b></p></td>
<td tabindex="-1"><p><b>This mode is legacy, and Amazon Bedrock does not share your content with model providers today.</b> Setting this mode does not cause your inputs or outputs to be shared with a model provider. New configurations should use <code class="code">aws_review</code>.</p>
<p><b>If you are already set to <code class="code">provider_data_share</code>, you do not need to change anything</b> — it sits above <code class="code">aws_review</code> in the ordering below, so it continues to satisfy every model that requires human review. See <a href="abuse-detection.html" rel="noopener noreferrer" target="_blank">Amazon Bedrock abuse detection</a> and <a href="https://aws.amazon.com/service-terms/" rel="noopener noreferrer" target="_blank"><span>AWS Service Terms</span><awsui-icon class="awsdocs-link-icon" name="external"></awsui-icon></a>.</p></td>
</tr>
<tr>
<td tabindex="-1"><code class="code">inherit</code></td>
<td tabindex="-1">No opinion at this scope — defer to a broader scope. This is the default for new accounts and projects.</td>
</tr>
</table></div></div>
<div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"></awsui-icon><h6>Human review: aws_review and legacy provider_data_share</h6></div><div class="awsdocs-note-text"><p>Some model providers require that inputs and outputs be available for human review as a condition of access to their models. Two modes grant that permission, differing in who performs the review and in whether your content leaves AWS. <code class="code">aws_review</code> is the current mechanism; <code class="code">provider_data_share</code> is legacy.</p><div class="table-container"><div class="table-contents"><table id="w649aac20c13b8c21b7b7b5"><thead>
<tr>
<th><b>Mode</b></th>
<th><b>Who reviews your content</b></th>
<th><b>Does your content leave AWS?</b></th>
</tr>
</thead>
<tr>
<td tabindex="-1"><code class="code">aws_review</code></td>
<td tabindex="-1">AWS</td>
<td tabindex="-1">No</td>
</tr>
<tr>
<td tabindex="-1"><code class="code">provider_data_share</code> (legacy)</td>
<td tabindex="-1">No one — provider review is not supported today</td>
<td tabindex="-1">No</td>
</tr>
</table></div></div><p>AWS reviews content only for models whose provider requires human review. Sharing content with model providers is not supported today, so <code class="code">provider_data_share</code> grants a permission that is not exercised — use <code class="code">aws_review</code> instead.</p></div></div>
<h2 id="data-retention-mode-ordering">How modes are ordered</h2>
<p>Retention modes form an ordered scale, from least to most permissive:</p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class="">none < default < aws_review < provider_data_share</code></pre>
<p>A model is available to you when your effective mode is at or above the mode that model requires. A more permissive setting subsumes a less permissive one: if you have authorized AWS to share your content with the model provider, you have also authorized AWS to review it itself.</p>
<p><code class="code">inherit</code> is not part of this ordering — it expresses no opinion at its scope and defers to a broader one. See <a href="#data-retention-resolution">How your retention mode is determined</a>.</p>
<div class="awsdocs-note awsdocs-important"><div class="awsdocs-note-title"><awsui-icon name="status-warning" variant="error"></awsui-icon><h6>Existing provider_data_share configurations keep working</h6></div><div class="awsdocs-note-text"><p>If your account or project is already set to <code class="code">provider_data_share</code>, you do not need to take any action to continue using models that require <code class="code">aws_review</code>, including Claude Fable 5 and Claude Fable 5.1. Because <code class="code">provider_data_share</code> is the more permissive setting, it continues to satisfy those models' requirement.</p><p>Moving from <code class="code">provider_data_share</code> to <code class="code">aws_review</code> is nonetheless worth doing where you can: it states the behavior that actually applies, since content sharing with model providers is not supported today.</p></div></div>
<div class="awsdocs-note awsdocs-important"><div class="awsdocs-note-title"><awsui-icon name="status-warning" variant="error"></awsui-icon><h6>Important</h6></div><div class="awsdocs-note-text"><p>Configuring your account or project to <code class="code">aws_review</code> does <em>not</em> mean all models will start retaining your content for review. Your configured mode sets what you allow — each model independently declares which modes it supports through <code class="code">allowed_modes</code>. Most models currently do not require human review. The interaction works as follows:</p><div class="itemizedlist">
<ul class="itemizedlist"><li class="listitem"><p>If a model's <code class="code">allowed_modes</code> includes <code class="code">none</code>, we won't persist anything.</p></li><li class="listitem"><p>If a model's <code class="code">allowed_modes</code> includes <code class="code">default</code> but not <code class="code">none</code>, AWS retains the data — the model provider does not receive it.</p></li><li class="listitem"><p>If a model's <code class="code">allowed_modes</code> includes <code class="code">aws_review</code>, AWS retains the data and AWS may review it — the model provider does not receive it. AWS reviews content only for models whose provider requires human review.</p></li><li class="listitem"><p>If a model's minimum requirement is <code class="code">aws_review</code>, the model is available only when your effective mode is <code class="code">aws_review</code> or higher. If your effective mode is <code class="code">none</code> or <code class="code">default</code>, the model will appear as unavailable on the bedrock-mantle endpoint, and requests to it will return a <code class="code">ValidationException</code> error on the bedrock-runtime endpoint.</p></li><li class="listitem"><p>Setting the legacy <code class="code">provider_data_share</code> does not cause your content to be shared with a model provider — content sharing is not supported today.</p></li></ul></div></div></div>
<h2 id="data-retention-resolution">How your retention mode is determined</h2>
<p>Data retention is configured at two scopes, with the model's own default as the fallback:</p>
<div class="itemizedlist">
<ul class="itemizedlist"><li class="listitem"><p><b>Project</b> (most specific) — set through <code class="code">POST /v1/organization/projects/<span>{</span>project_id}</code></p></li><li class="listitem"><p><b>Account</b> (at the Region level) — set through <code class="code">PUT /v1/data_retention</code></p></li><li class="listitem"><p><b>Model default</b> (least specific, read-only) — the model's built-in default</p></li></ul></div>
<p>The effective mode for any request is determined by taking the first scope whose value is not <code class="code">inherit</code>:</p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class="">effective mode = first non-inherit value of (project → account → model default)</code></pre>
<p>For example, if your project is set to <code class="code">inherit</code> and your account is set to <code class="code">none</code>, the effective mode is <code class="code">none</code> for all models invoked from that project.</p>
<h2 id="data-retention-configuration">Configuring data retention</h2>
<h3 id="data-retention-set-account">Set account-wide data retention in a specific Region</h3>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class="">curl -X PUT https://bedrock-mantle.us-east-1.api.aws/v1/data_retention \
-H "x-api-key: $BEDROCK_API_KEY" \
-H "Content-Type: application/json" \
-d '<span>{</span> "mode": "aws_review" }'</code></pre>
<p><b>Response:</b></p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli (json)--><code class="json "><span>{</span>
"mode": "aws_review",
"updated_at": 1733529600
}</code></pre>
<h3 id="data-retention-set-project">Set project-level data retention</h3>
<p>Projects are specific to the bedrock-mantle endpoint. The Bedrock control plane and Runtime APIs have no project concept, so bedrock-runtime requests cannot be project-scoped.</p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class="">curl https://bedrock-mantle.us-east-1.api.aws/v1/organization/projects/proj_abc123 \
-H "x-api-key: $BEDROCK_API_KEY" \
-H "Content-Type: application/json" \
-d '<span>{</span> "data_retention": <span>{</span> "mode": "aws_review" } }'</code></pre>
<p>To invoke models with your desired data retention mode on a bedrock-runtime endpoint, set your account data retention mode in that Region using the Bedrock Control Plane API.</p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class="">curl -X PUT https://bedrock.us-east-1.amazonaws.com/data-retention \
-H "Authorization: Bearer $AWS_BEARER_TOKEN_BEDROCK" \
-H "Content-Type: application/json" \
-d '<span>{</span> "mode": "aws_review" }'</code></pre>
<p><b>Response:</b></p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli (json)--><code class="json "><span>{</span>
"mode": "aws_review",
"updated_at": "2026-06-07T20:19:44.723Z"
}</code></pre>
<h3 id="data-retention-check-config">Check your current configuration</h3>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class=""># Account level
curl https://bedrock-mantle.us-east-1.api.aws/v1/data_retention \
-H "x-api-key: $BEDROCK_API_KEY"
# Project level
curl https://bedrock-mantle.us-east-1.api.aws/v1/organization/projects/proj_abc123 \
-H "x-api-key: $BEDROCK_API_KEY"</code></pre>
<p>To check your current configuration on a bedrock-runtime endpoint, use the Bedrock Control Plane API.</p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class=""># Account level
curl https://bedrock.us-east-1.amazonaws.com/data-retention \
-H "Authorization: Bearer $AWS_BEARER_TOKEN_BEDROCK"</code></pre>
<h3 id="data-retention-check-model">Check a model's effective mode and allowed modes</h3>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class="">curl https://bedrock-mantle.us-east-1.api.aws/v1/models/anthropic.claude-fable-5 \
-H "x-api-key: $BEDROCK_API_KEY"</code></pre>
<p><b>Response:</b></p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli (json)--><code class="json "><span>{</span>
"id": "anthropic.claude-fable-5",
"created": 1733443200,
"owned_by": "system",
"status": "available",
"data_retention": <span>{</span>
"mode": "aws_review",
"source": "account",
"allowed_modes": ["aws_review", "provider_data_share"]
}
}</code></pre>
<div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"></awsui-icon><h6>Note</h6></div><div class="awsdocs-note-text"><p>The Bedrock control plane does not expose a per-model retention signal.</p></div></div>
<h2 id="data-retention-model-availability">Model availability and data retention</h2>
<p>Each model declares the retention modes that satisfy its requirement through <code class="code">allowed_modes</code>, which lists every mode at or above the minimum the model needs. If your effective mode sits below what the model requires — see <a href="#data-retention-mode-ordering">How modes are ordered</a> — the model will appear as <code class="code">status: "unavailable"</code> in the models list on the bedrock-mantle endpoint, and requests to it on the bedrock-runtime endpoint will fail with a <code class="code">ValidationException</code> error.</p>
<p><b>Example:</b> Claude Fable 5 and Claude Fable 5.1 require human review (<code class="code">allowed_modes: ["aws_review", "provider_data_share"]</code>). You must explicitly set your data retention mode to <code class="code">aws_review</code>, or to the legacy <code class="code">provider_data_share</code>, before you can invoke these models. If your effective mode is <code class="code">none</code> or <code class="code">default</code>, these models will be unavailable.</p>
<p>By setting <code class="code">aws_review</code>, you are explicitly instructing us to retain your inputs and outputs so that AWS can perform the human review the model provider requires as a condition of access. Your content is not shared with the model provider. See <a href="abuse-detection.html" rel="noopener noreferrer" target="_blank">Amazon Bedrock abuse detection</a> and <a href="https://aws.amazon.com/service-terms/" rel="noopener noreferrer" target="_blank"><span>AWS Service Terms</span><awsui-icon class="awsdocs-link-icon" name="external"></awsui-icon></a>.</p>
<div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"></awsui-icon><h6>Note</h6></div><div class="awsdocs-note-text"><p>At launch, there is no console UI for configuring data retention. Customers must use the API (see "Configuring data retention" above) or the Bedrock SDK.</p></div></div>
<p><b>Response when a model is unavailable due to retention policy:</b></p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli (json)--><code class="json "><span>{</span>
"id": "anthropic.claude-fable-5",
"created": 1733443200,
"owned_by": "system",
"status": "unavailable",
"status_reason": "This model is not available under data retention mode 'default'.",
"data_retention": <span>{</span>
"mode": "default",
"source": "account",
"allowed_modes": ["aws_review", "provider_data_share"]
}
}</code></pre>
<h3 id="data-retention-opt-in">How to opt in for the bedrock-mantle endpoint</h3>
<p>To enable Claude Fable 5 and Claude Fable 5.1 for your account:</p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class="">curl https://bedrock-mantle.us-east-1.api.aws/v1/data_retention \
-H "x-api-key: $BEDROCK_API_KEY" \
-H "Content-Type: application/json" \
-d '<span>{</span> "mode": "aws_review" }'</code></pre>
<p>Or at the project level (if you want to limit human review to a specific project):</p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class="">curl https://bedrock-mantle.us-east-1.api.aws/v1/organization/projects/proj_abc123 \
-H "x-api-key: $BEDROCK_API_KEY" \
-H "Content-Type: application/json" \
-d '<span>{</span> "data_retention": <span>{</span> "mode": "aws_review" } }'</code></pre>
<p><b>How to opt in for the bedrock-runtime endpoint using the Bedrock Control Plane API:</b></p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli ()--><code class="">curl -X PUT https://bedrock.us-east-1.amazonaws.com/data-retention \
-H "Authorization: Bearer $AWS_BEARER_TOKEN_BEDROCK" \
-H "Content-Type: application/json" \
-d '<span>{</span> "mode": "aws_review" }'</code></pre>
<div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"></awsui-icon><h6>Mixed-model projects</h6></div><div class="awsdocs-note-text"><p>Setting a project to <code class="code">aws_review</code> does not mean all model traffic in that project is retained for review. Each model's <code class="code">allowed_modes</code> determines what actually happens to your data:</p><div class="itemizedlist">
<ul class="itemizedlist"><li class="listitem"><p>A model whose <code class="code">allowed_modes</code> is <code class="code">["aws_review", "provider_data_share"]</code> (for example, Claude Fable 5)—human review is required, so data is retained within the AWS boundary and may be reviewed by AWS on any request. It is not shared with the model provider.</p></li><li class="listitem"><p>A model whose <code class="code">allowed_modes</code> is <code class="code">["none", "default", "aws_review", "provider_data_share"]</code> (for example, Claude Opus 4.8)—the model permits <code class="code">none</code>, so data is not retained whatever mode you set. A more permissive account or project setting does not cause its content to be retained, reviewed, or shared.</p></li></ul></div></div></div>
<h2 id="data-retention-zdr">Zero data retention (ZDR) access</h2>
<p>Some models require data retention for safety and abuse-prevention purposes. If your organization requires zero data retention for compliance reasons and you need access to these models, contact your AWS account manager to discuss eligibility. ZDR access is evaluated on a per-account, per-model basis in coordination with the model provider.</p>
<p>Accounts approved for ZDR on a specific model will see <code class="code">"none"</code> included in that model's <code class="code">allowed_modes</code>.</p>
<div class="awsdocs-note"><div class="awsdocs-note-title"><awsui-icon name="status-info" variant="link"></awsui-icon><h6>Anthropic Claude models</h6></div><div class="awsdocs-note-text"><p>ZDR eligibility for Claude models is managed by Anthropic. Contact your Anthropic account representative for support.</p></div></div>
<h2 id="data-retention-iam">Enforcing retention policy with IAM</h2>
<p>You can enforce a data retention policy across your organization using IAM policies or Service Control Policies (SCPs). The write actions publish a <code class="code">bedrock-mantle:DataRetentionMode</code> condition key that lets you restrict which modes can be set.</p>
<p><b>Example SCP — require zero data retention across the organization:</b></p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli (json)--><code class="json "><span>{</span>
"Effect": "Deny",
"Action": [
"bedrock-mantle:PutAccountDataRetention",
"bedrock-mantle:CreateProject",
"bedrock-mantle:UpdateProject"
],
"Resource": "*",
"Condition": <span>{</span>
"StringNotEquals": <span>{</span>
"bedrock-mantle:DataRetentionMode": "none"
}
}
}</code></pre>
<p><b>Bedrock Control Plane:</b></p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli (json)--><code class="json "><span>{</span>
"Effect": "Deny",
"Action": [
"bedrock:PutAccountDataRetention"
],
"Resource": "*",
"Condition": <span>{</span>
"StringNotEquals": <span>{</span>
"bedrock:DataRetentionMode": "none"
}
}
}</code></pre>
<p>This prevents anyone in the organization from setting data retention to anything other than <code class="code">none</code>, ensuring no inference data is ever retained.</p>
<p><b>Example SCP — permit AWS retention but not human review:</b></p>
<pre class="programlisting"><div class="code-btn-container"><div class="btn-copy-code" title="Copy"><awsui-icon name="copy"></awsui-icon></div></div><!--DEBUG: cli (json)--><code class="json "><span>{</span>
"Effect": "Deny",
"Action": [
"bedrock-mantle:PutAccountDataRetention",
"bedrock-mantle:CreateProject",
"bedrock-mantle:UpdateProject"
],
"Resource": "*",
"Condition": <span>{</span>
"ForAnyValue:StringEquals": <span>{</span>
"bedrock-mantle:DataRetentionMode": [
"aws_review",
"provider_data_share"
]
}
}
}</code></pre>
<p>Use this when your organization accepts retention for abuse detection but cannot permit human review of its content. Models that require human review will appear as <code class="code">status: "unavailable"</code> on the bedrock-mantle endpoint, and requests to them on the bedrock-runtime endpoint will fail with a <code class="code">ValidationException</code> error.</p>
<h2 id="data-retention-what-is-retained">What data is retained and for how long</h2>
<p>For models requiring <code class="code">aws_review</code> (currently Claude Fable 5 and Claude Fable 5.1): user prompts and completions are retained within the AWS boundary for up to 30 days and may be reviewed by AWS to meet the human review requirement the model provider imposes as a condition of access. Your content is not shared with the model provider.</p>
<p>For the legacy <code class="code">provider_data_share</code> mode: Amazon Bedrock does not share your content with model providers today, so this mode results in the same handling as <code class="code">aws_review</code> — retained within the AWS boundary for up to 30 days, and reviewed by AWS only where the model requires it.</p>
<p>For models under <code class="code">default</code> mode: data may be retained for abuse detection purposes — see <a href="abuse-detection.html" rel="noopener noreferrer" target="_blank">Amazon Bedrock abuse detection</a> for required retention details. For retention beyond abuse detection (for example, Responses API with <code class="code">store=true</code>), consult the model's documentation and terms.</p>
<p>If cross-region inference is enabled for these models, retained inputs and outputs are stored in destination Regions (that is, the Region where your inference request is processed).</p>
<p>See <a href="https://aws.amazon.com/legal/bedrock/third-party-models/" rel="noopener noreferrer" target="_blank"><span>Anthropic Terms of Service</span><awsui-icon class="awsdocs-link-icon" name="external"></awsui-icon></a> for model-specific data handling details.</p>
<h2 id="data-retention-iam-reference">IAM actions reference</h2>
<div class="table-container"><div class="table-contents"><table id="w649aac20c13b8c21c23b3"><thead>
<tr>
<th><b>Route</b></th>
<th><b>IAM action</b></th>
</tr>
</thead>
<tr><td tabindex="-1"><code class="code">GET /v1/models</code></td><td tabindex="-1"><code class="code">bedrock-mantle:ListModels</code></td></tr>
<tr><td tabindex="-1"><code class="code">GET /v1/models/<span>{</span>model}</code></td><td tabindex="-1"><code class="code">bedrock-mantle:GetModel</code></td></tr>
<tr><td tabindex="-1"><code class="code">GET /v1/data_retention</code></td><td tabindex="-1"><code class="code">bedrock-mantle:GetAccountDataRetention</code></td></tr>
<tr><td tabindex="-1"><code class="code">PUT /v1/data_retention</code></td><td tabindex="-1"><code class="code">bedrock-mantle:PutAccountDataRetention</code></td></tr>
<tr><td tabindex="-1"><code class="code">GET /v1/organization/projects/<span>{</span>project_id}</code></td><td tabindex="-1"><code class="code">bedrock-mantle:GetProject</code></td></tr>
<tr><td tabindex="-1"><code class="code">POST /v1/organization/projects/<span>{</span>project_id}</code></td><td tabindex="-1"><code class="code">bedrock-mantle:UpdateProject</code></td></tr>
</table></div></div>
<div class="table-container"><div class="table-contents"><table id="w649aac20c13b8c21c23b5"><thead>
<tr>
<th><b>Route</b></th>
<th><b>IAM action</b></th>
</tr>
</thead>
<tr><td tabindex="-1"><code class="code">GET /data-retention</code></td><td tabindex="-1"><code class="code">bedrock:GetAccountDataRetention</code></td></tr>
<tr><td tabindex="-1"><code class="code">PUT /data-retention</code></td><td tabindex="-1"><code class="code">bedrock:PutAccountDataRetention</code></td></tr>
</table></div></div>
<awsdocs-copyright class="copyright-print"></awsdocs-copyright><awsdocs-thumb-feedback right-edge="{{$ctrl.thumbFeedbackRightEdge}}"></awsdocs-thumb-feedback></div><noscript><div><div><div><div id="js_error_message"><p><img src="https://d1ge0kk1l5kms0.cloudfront.net/images/G/01/webservices/console/warning.png" alt="Warning" /> <strong>Javascript is disabled or is unavailable in your browser.</strong></p><p>To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.</p></div></div></div></div></noscript><div id="main-col-footer" class="awsui-util-font-size-0"><div id="doc-conventions"><a target="_top" href="/general/latest/gr/docconventions.html">Document Conventions</a></div><div class="prev-next"><div id="previous" class="prev-link" accesskey="p" href="./vpc-s3.html">(Example) Restrict data access to your S3 data</div><div id="next" class="next-link" accesskey="n" href="./security-iam.html">Identity and access management</div></div></div><awsdocs-page-utilities></awsdocs-page-utilities></div><div id="quick-feedback-yes" style="display: none;"><div class="title">Did this page help you? - Yes</div><div class="content"><p>Thanks for letting us know we're doing a good job!</p><p>If you've got a moment, please tell us what we did right so we can do more of it.</p><p><awsui-button id="fblink" rel="noopener noreferrer" target="_blank" text="Feedback" click="linkClick($event)" href="https://docs.aws.amazon.com/forms/aws-doc-feedback?feedback_destination_id=2d8c2a09-1dac-41bf-9893-c0333d272b2c&topic_url=https://docs.aws.amazon.com/en_us/bedrock/latest/userguide/data-retention.html"></awsui-button></p></div></div><div id="quick-feedback-no" style="display: none;"><div class="title">Did this page help you? - No</div><div class="content"><p>Thanks for letting us know this page needs work. We're sorry we let you down.</p><p>If you've got a moment, please tell us how we can make the documentation better.</p><p><awsui-button id="fblink" rel="noopener noreferrer" target="_blank" text="Feedback" click="linkClick($event)" href="https://docs.aws.amazon.com/forms/aws-doc-feedback?feedback_destination_id=2d8c2a09-1dac-41bf-9893-c0333d272b2c&topic_url=https://docs.aws.amazon.com/en_us/bedrock/latest/userguide/data-retention.html"></awsui-button></p></div></div></div></body></div></awsdocs-view><div class="page-loading-indicator" id="page-loading-indicator"><awsui-spinner size="large"></awsui-spinner></div></div><div id="tools-panel" dom-region="tools"><awsdocs-tools-panel id="awsdocs-tools-panel"></awsdocs-tools-panel></div></awsui-app-layout><awsdocs-cookie-banner class="doc-cookie-banner"></awsdocs-cookie-banner></div></body></html>