Enforce zero data retention on Amazon Bedrock with Bedrock Projects and service control policies

Amazon Bedrock allows organizations to control whether prompts and model outputs are retained after processing through different data retention modes (none, some, inherit, or provider_data_share). To enforce consistent data retention policies across multiple accounts, especially when using models that require data sharing with third parties like Claude Fable 5, organizations can use Amazon Bedrock Projects and service control policies (SCPs, which are rules that limit what actions users in an organization can perform). The key principle is that your configured retention mode sets a ceiling (upper limit) on retention, not a guarantee, so models that support zero retention will still use zero retention even if your account allows higher retention.