Data Platform: Skip system messages in LiteLLM guardrail evaluations

[muhammad9970]

Summary

• set skip_system_message_in_guardrail: true globally for the public and admin LiteLLM proxies
• re-enable the Bedrock prompt-attack guardrail by setting default_on: true
• exclude role: system content from compatible guardrail evaluations while continuing to send the complete message list to the model
• manage LiteLLM unified access-group team assignments from the existing team configuration
• grant the Justice Data Platform team access to the generally-available-models group

Relates to the work being done here

[github-actions]

---

Checkov Scan Success

Show Output

*****************************

Checkov will check the following folders:
terraform/environments/data-platform/ai-gateway

*****************************

Running Checkov in terraform/environments/data-platform/ai-gateway
terraform scan results:

Passed checks: 91, Failed checks: 0, Skipped checks: 0, Parsing errors: 1

secrets scan results:

Passed checks: 0, Failed checks: 0, Skipped checks: 1


checkov_exitcode=0

---

TFLint Scan Success

Show Output

*****************************

Using default config
Installing "terraform" plugin...
The plugin was signed using a legacy PGP signing key. Please update the plugin to the latest version
Installed "terraform" (source: github.com/terraform-linters/tflint-ruleset-terraform, version: 0.15.0)
tflint checking:
terraform/environments/data-platform/ai-gateway

*****************************

Running tflint in terraform/environments/data-platform/ai-gateway
tflint_exitcode=0