Unit 42 Uncovers Privilege Escalation Flaw in Amazon Bedrock AgentCore

Imagine a service designed to help users having unrestricted access to sensitive data - that's what Unit 42 discovered in Amazon Bedrock's AgentCore, where a flaw allowed for privilege escalation and data exfiltration due to overly broad permissions. This "Agent God Mode" vulnerability highlights the risks of…

https://osintsights.com/unit-42-uncovers-privilege-escalation-flaw-in-amazon-bedrock-agentcore?utm_source=mastodon&utm_medium=social

#PrivilegeEscalationFlaw #AmazonBedrock #Agentcore #IdentityAndAccessManagement #Iam

Vulnerabilities Exposed in Amazon Bedrock AgentCore Sandbox

Security researchers at Unit 42 have uncovered critical vulnerabilities in Amazon Bedrock AgentCore's sandbox, revealing that a protective layer meant to separate code and services can be breached using DNS tunneling, exposing sensitive credentials in the process. This alarming discovery highlights the potential risks of slipping…

https://osintsights.com/vulnerabilities-exposed-in-amazon-bedrock-agentcore-sandbox

#AmazonBedrock #Agentcore #SandboxEscape #DnsTunneling #CredentialExposure

AgentCore 上の Claude Code の出力を AppSync Event API でリアルタイムにブラウザへ流す
https://qiita.com/Kota__Sasaki/items/a5008e550de8fa01dc61?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #cognito #AppSync #AgentCore

【AWS】AgentCore Runtimeで「次の候補」が毎回1件目に戻ってしまう原因
https://qiita.com/yakumo_09/items/255b08c7edece53df696?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #bedrock #AIエージェント #StrandsAgents #AgentCore

OpenSpec — 仕様駆動開発のナレッジをいい感じに循環させる(Amplify + AgentCoreハンズオン付き)
https://qiita.com/Syoitu/items/eb3230214d8a7c6231d5?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #amplify #ClaudeCode #AgentCore #Openspec

AgentCore RuntimeをTerraformでVPCにデプロイして送信元IPアドレスを固定にする
https://qiita.com/ry-harada/items/6c78b38f6e94cf025997?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #vpc #Terraform #AgentCore

Just shipped a big update to our open-source AI Slack bot (Vera), built on AWS Bedrock AgentCore.

New in the public repo:
- Per-user Atlassian OAuth
- Sub-agent delegation
- Chart generation
- File attachments

It's all terraform and open source (MIT license) so you can deploy and use it yourself.

>github.com/KyMidd/AgentCore_AgenticSlackBot

#GenAI #AWS #AgentCore #OpenSource #Terraform #MCP

話し相手がいないのでAWSとおしゃべりしてみた
https://qiita.com/kikuziro/items/3d0d770328dd1cc43da2?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #AI #bedrock #AquaVoice #AgentCore

Bedrock AgentCore RuntimeはCDKでらくらくデプロイ！コンテナいらずでHot swapも可能！！
https://qiita.com/moritalous/items/d865fc92921a822c1f44?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #bedrock #CDK #AgentCore

GenUの「Agent Builder」ユースケースを使って、お手軽にエージェントを作成して利用してみよう
https://qiita.com/y-mae/items/92842c167a0096dedb91?utm_campaign=popular_items&utm_medium=feed&utm_source=popular_items

#qiita #AWS #AIエージェント #GenU #AgentCore