←Search results

By relevance · Total 6789 results Clear search

Monday

Saturday

Friday

  1. AWS Machine Learning

    Building Multi-Account AI Agents with AgentCore Gateway and MCP

    AWS explains how to build multi-account AI agents using Amazon Bedrock AgentCore Gateway and MCP: the platform account runs agents through AgentCore Runtime and performs LLM inference via Amazon Bedrock, while each line-of-business account packages its data and tools as MCP servers, with the Gateway serving as a single MCP endpoint for unified tool discovery and invocation. The solution also combines AgentCore Identity with Okta for OAuth 2.0 M2M authentication, and uses Policy in AgentCore (Cedar) to achieve fine-grained authorization.

    AWS explains how to build multi-account AI agents using Amazon Bedrock AgentCore Gateway and MCP: the platform account runs agents through AgentCore Runtime and performs LLM inference via Amazon Bedrock, while each line-of-business account packages its data and tools as MCP servers, with the Gateway serving as a single MCP endpoint for unified tool discovery and invocation. The solution also combines AgentCore Identity with Okta for OAuth 2.0 M2M authentication, and uses Policy in AgentCore (Ced

    Matched fieldsTitle、Summary、Body

Thursday

  1. Cato AI Labs

    How to secure the actual behavior of Bedrock AgentCore agents

    Cato AI Labs points out that Amazon Bedrock AgentCore's native access controls cannot prevent prompt injection; content exchanged between agents and models must be inspected at four stages: prompts, tool calls, tool responses, and outputs. AgentCore Policy uses Cedar rules to intercept tool calls that go through the Gateway, but tools that developers write directly into code do not pass through the Gateway and are therefore not inspected. Cato's Amazon Bedrock integration discovers all agents on AgentCore in a read-only manner and covers agents on AWS, Microsoft Foundry, Amazon Quick, and developer-built endpoints.

    Cato AI Labs points out that Amazon Bedrock AgentCore's native access controls cannot prevent prompt injection; content exchanged between agents and models must be inspected at four stages: prompts, tool calls, tool responses, and outputs. AgentCore Policy uses Cedar rules to intercept tool calls that go through the Gateway, but tools that developers write directly into code do not pass through the Gateway and are therefore not inspected. Cato's Amazon Bedrock integration discovers all agents on

    Matched fieldsTitle、Summary、Body