AWS AGENTCORE: THE OVERLOOKED PRIVILEGE ESCALATION PATH IN BEDROCK'S AI TOOLING

Summary from the TLDR InfoSec newsletter

AWS Bedrock AgentCore is a collection of tools that assist in deploying and scaling AI agents. AgentCore provides the ability to launch Code Interpreters, which run code in a sandboxed environment and can be customized to have access to AWS credentials to perform actions on AWS resources. Custom Code Interpreters cannot be protected with resource policies and only emit CloudTrail data events, presenting a tempting privilege escalation vector for attackers.