Bedrock checks should validate model usage for each regions

[agasthik]

Steps to Reproduce

Execute Prowler scan using standard installation steps.
Version 4.5.0

Expected behavior

Ensure that the checks for bedrock_model_invocation_logging_enabled for Amazon Bedrock validate whether the models access has been requested in an AWS region before flagging the status of the check . Today the scans are reporting failures even from Regions where the Model Access has not been activated in the account(s). Typically, customers have to request for “Model Access” in each region separately from the Bedrock Configurations page (or CLI etc) . If a region does not have the model access requested, then the model invocation logging check for that particular region wouldn’t be possible as well. The current scan checks are delivering false positives in the regions where models are not being activated

Actual Result with Screenshots or Logs

How did you install Prowler?

From pip package (pip install prowler)

Environment Resource

Codebuild

OS used

Amazon Linux 2023

Prowler version

4.5.0

Pip version

24.0

Context

Amazon Bedrock check refinement

[agasthik]

Please validate similarly for other checks

• cloudtrail_threat_detection_llm_jacking
• bedrock_agent_guardrail_enabled
• bedrock_guardrail_prompt_attack_filter_enabled
• bedrock_guardrail_sensitive_information_filter_enabled

[MrCloudSec]

Thank you @agasthik for the heads up!
However, there is no API Call in boto3 to list the accessible models in Bedrock for each region. I created the following issue to request the support of ListFoundationModelAgreementOffers to get this information: boto/boto3#4336