Bedrock agent idle session TTL exceeds one hour
What it checks
Bedrock agent idle session TTL exceeds one hour
Where it applies
Terraform: aws_bedrockagent_agent
CloudFormation: AWS::Bedrock::Agent
How to fix it
- Set idle_session_ttl_in_seconds to 1800 (30 minutes) or lower. For sensitive agents, 600 (10 minutes) is appropriate.
Frameworks
- NIST 800-53 rev5 CM-6
These mappings are advisory, not an attestation of compliance.