Files
litellm/litellm
mateo-berri 87ceb3486b fix(proxy): close guardrail bypass on bedrock invoke passthrough routes
Pre-call extraction and post-call output processing only handled Converse
shapes, so /bedrock/model/{modelId}/invoke and invoke-with-response-stream
returned unguarded. An authenticated caller could move blocked content into
an InvokeModel payload and skip the key/team guardrail entirely.

Non-Converse Bedrock routes now fall back to the generic passthrough handler,
which scans the full request and response payloads so blocking guardrails
still run, matching how other passthrough providers are guarded.
2026-06-12 06:50:46 +00:00
..
2026-04-25 14:47:54 -07:00
2026-06-02 08:48:10 -07:00
2026-04-30 09:10:24 +05:30
2026-06-10 10:34:07 -07:00
2026-05-18 16:27:44 -07:00