Prompt Injection
An attack that smuggles instructions into input to override the model's intended behavior.
Prompt injection occurs when malicious content embedded in user input, retrieved documents, or external data causes a large language model to ignore its system instructions and follow attacker-controlled commands instead. In direct injection the attacker speaks to the model directly; in indirect injection the hostile instructions arrive through data the model retrieves, such as a web page or tool output, making it especially dangerous in agentic Amazon Bedrock pipelines that call external APIs. Amazon Bedrock Guardrails can filter inputs and outputs to reduce exposure, but guardrails alone are not a complete defense. For the exam, distinguish prompt injection (overriding instructions via crafted input) from jailbreaking (coaxing the model past its safety training).
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →