AWS Bedrock Guardrails Don't Filter PII in Tool Calls
Bedrock Guardrails PII filters protect text output but completely skip tool_use parameters. I tested 12 models across 6 providers — the gap is platform-level. AWS updated their docs after my report.