The GenAI Security Scoping Matrix: Know What You’re Securing

AWS’s Generative AI Security Scoping Matrix turns one hard question — what exactly are we securing? — into five workload scopes and five security disciplines. Learn to place any genAI use case on the buy-to-build spectrum and read off what governance, legal, risk, controls, and resilience demand at that position.

Content current as of 2026-09.

Lessons

  1. Scope before you secure
  2. The five scopes, one by one
  3. Governance, legal, and privacy across the scopes
  4. Risk, controls, and resilience
  5. Putting the matrix to work