Aws

AWS Launches Trust in Depth Controls for Autonomous AI Agents

FIRST LOOK ATLAS OWASP MEDIUM ▲ 6.8 AWS Machine Learning Blog Oct 16, 2026

AWS has published a framework called 'Trust in Depth' for Amazon Bedrock agents, introducing structured autonomy controls that allow organisations to grant AI agents expanded operational scope while maintaining human oversight and policy-enforced boundaries. For defenders, this closes a meaningful gap in agentic AI governance — specifically the binary choice between fully supervised and fully autonomous agent operation — by offering graduated trust tiers tied to policy controls. Residual gaps remain around cross-provider interoperability, the maturity required to define and maintain granular trust policies at scale, and the absence of runtime behavioural anomaly detection as a complement to the static policy framework.

AWS Launches AgentCore Payments with Anchor Browser for AI Agents

FIRST LOOK ATLAS OWASP MEDIUM ▲ 6.2 AWS Machine Learning Blog Oct 14, 2026

AWS has introduced transactional capabilities for AI agents through AgentCore Payments and Anchor Browser, enabling agents to autonomously execute financial transactions within a managed cloud environment. For defenders, this closes a significant observability gap by centralising payment actions through a governed AWS service layer rather than untracked ad-hoc integrations, creating an auditable transaction surface. The residual gap lies in the maturity of authorisation guardrails and per-transaction approval workflows, which organisations must implement independently on top of the platform primitives.

AWS Adds Native Access Controls for RAG via Amazon Quick and Bedrock

FIRST LOOK ATLAS OWASP MEDIUM ▲ 6.2 AWS Machine Learning Blog Oct 08, 2026

AWS has introduced integrated access control capabilities for Retrieval-Augmented Generation (RAG) pipelines, combining Amazon Quick and Amazon Bedrock to enforce document-level permissions during AI-driven retrieval. This closes a meaningful gap for defenders: RAG systems have historically treated retrieval as a flat, permissionless operation, meaning users could receive AI-synthesised responses derived from documents they would not normally be authorised to read. Residual maturity questions remain around how granular these controls are at the chunk or passage level, whether they support complex identity federation scenarios, and how access policy drift is monitored over time.

AWS and Google Cloud Launch Hard Spend Caps for AI Agent Workloads

FIRST LOOK ATLAS OWASP LOW ▲ 5.5 Simon Willison Oct 04, 2026

AWS and Google Cloud have both introduced hard monthly spending caps for cloud services, enabling developers and organisations to set firm financial ceilings that pause or terminate services rather than allowing runaway billing. For defenders overseeing agentic AI deployments, this closes a meaningful blast-radius gap: coding agents and personal agents that autonomously invoke paid APIs or spin up compute can now be constrained to a pre-approved financial envelope, limiting the operational damage of a misbehaving or compromised agent. The residual gap is significant — coverage remains fragmented across providers, enforcement depends on correct configuration by each team, and hard caps do not yet extend to non-financial resource consumption such as data egress or API call volume.

AWS Launches AgentCore Gateway for Multi-Account AI Agents via MCP

FIRST LOOK ATLAS OWASP MEDIUM ▲ 6.2 AWS Machine Learning Blog Sep 26, 2026

AWS has released AgentCore Gateway, a managed control plane that enables AI agents to operate across multiple AWS accounts using the Model Context Protocol (MCP), centralising tool access and identity brokering for distributed agentic workloads. For defenders, this closes a meaningful gap in cross-account agent governance by providing a structured integration layer that enforces IAM-scoped tool invocation rather than relying on ad-hoc credential passing between accounts. Residual gaps remain around MCP server vetting maturity, cross-account audit log correlation, and the organisational readiness required to govern tool registries at scale.

AWS Brings Secure Self-Service AI Agents to Financial Services

FIRST LOOK ATLAS OWASP LOW ▲ 5.5 AWS Machine Learning Blog Sep 20, 2026

MRH Trowe, a financial services firm, deployed secure self-service AI agents on AWS, establishing a governed model for agentic AI adoption in a highly regulated industry. This closes a meaningful gap for defenders by demonstrating how identity-scoped, policy-bounded AI agents can operate in environments where data sensitivity and compliance requirements are paramount. Residual gaps remain around standardised audit frameworks for agent actions and the operational maturity required to govern multi-agent workflows at scale.

AWS Adds Defense-in-Depth Authorization for MCP Tools on Amazon Q

FIRST LOOK ATLAS OWASP MEDIUM ▲ 7.2 AWS Machine Learning Blog Sep 20, 2026

AWS has published guidance and implementation patterns for defense-in-depth authorization controls applied to Model Context Protocol (MCP) tools within the Amazon Q platform, addressing the authorization gap that emerges when AI agents are granted access to external tools and services. This closes a meaningful defensive gap for enterprises deploying agentic AI: the risk of excessive or unverified tool invocation authority, which has been a persistent blind spot in MCP-based agent architectures. Realising the full benefit will require organisations to have mature IAM governance, MCP server inventory discipline, and operational runbooks for agent permission scoping already in place.

AWS Brings Model-Agnostic PII Detection to LLM Pipelines

FIRST LOOK ATLAS OWASP MEDIUM ▲ 5.5 AWS Machine Learning Blog Sep 15, 2026

AWS has published guidance and tooling for model-agnostic PII detection using large language models, enabling organisations to identify sensitive data exposure across diverse LLM deployments regardless of the underlying model provider. This closes a meaningful gap for defenders who previously lacked a flexible, provider-neutral mechanism for detecting PII leakage in LLM inputs and outputs at scale. Realising the full benefit requires integration maturity, consistent labelling policy, and operational commitment to monitoring LLM data flows in production.

Microsoft Sentinel and Defender Experts Add Multi-Cloud MDR Coverage

FIRST LOOK ATLAS OWASP MEDIUM ▲ 6.5 Microsoft Security Blog Aug 28, 2026

Microsoft's August 2026 security update extends Defender Experts MDR to third-party data sources ingested via Sentinel — including Palo Alto Networks, AWS, and Okta — and introduces Entra Tenant Governance for centralised multi-tenant visibility and drift monitoring. These additions close a meaningful gap for organisations running hybrid or multi-cloud environments, where managed detection historically stopped at Microsoft-native telemetry boundaries. Realising the full benefit requires P2 licensing, mature Sentinel ingestion pipelines, and organisational readiness to act on cross-tenant configuration drift alerts.

AWS Adds Agentic Observability via OpenSearch Service MCP Apps

FIRST LOOK ATLAS OWASP MEDIUM ▲ 5.5 AWS Machine Learning Blog Aug 26, 2026

AWS has released agentic observability tooling through Amazon OpenSearch Service MCP Apps, providing structured visibility into the actions, tool invocations, and decision traces of AI agents running on AWS infrastructure. This closes a meaningful gap for defenders who previously lacked native, queryable telemetry over agent behaviour — a prerequisite for detecting anomalous tool use, privilege escalation patterns, and unexpected data access in agentic pipelines. Realising the full defensive value will require mature logging schemas, tuned detection rules, and integration with existing SIEM or SOAR tooling that most organisations are still building.

AWS Launches AgentCore Gateway for AI Agent Tool Access Control

FIRST LOOK ATLAS OWASP MEDIUM ▲ 7.2 AWS Machine Learning Blog Aug 24, 2026

Amazon Bedrock AgentCore Gateway introduces centralised governance controls for AI agent tool access, enabling organisations to define, enforce, and audit which tools agents can invoke at runtime. This closes a meaningful gap for defenders who previously lacked a managed plane to govern agentic tool permissions at scale, reducing the risk of excessive agency and uncontrolled lateral tool invocation. Realising the full benefit will require organisations to mature their agent inventory practices and integrate Gateway policies with existing IAM and SIEM workflows.

AWS AgentCore Observability Brings Multi-Cloud AI Agent Monitoring

FIRST LOOK ATLAS OWASP MEDIUM ▲ 6.8 AWS Machine Learning Blog Aug 16, 2026

AWS has launched AgentCore Observability, a capability within its AgentCore platform that extends AI agent monitoring to on-premises and multi-cloud environments, giving operators unified visibility into agent behaviour regardless of deployment location. This closes a significant blind spot for defenders who previously lacked consistent telemetry across heterogeneous AI agent deployments, making it harder to detect anomalous agent actions or policy violations at runtime. Realising the full security value will depend on integration maturity, the depth of observable signals exposed, and whether organisations have the operational processes to act on the telemetry produced.

AWS Launches SageMaker AI and Bedrock AgentCore Workflow Integration

FIRST LOOK ATLAS OWASP MEDIUM ▲ 5.5 AWS Machine Learning Blog Aug 15, 2026

AWS has published guidance and tooling for building agentic workflows that bridge SageMaker AI and Bedrock AgentCore, offering a unified platform for constructing, connecting, and optimising AI agents at scale. For defenders, this represents a consolidation of agentic infrastructure under a managed cloud environment where IAM, logging, and network controls can be applied consistently — reducing the sprawl of unmanaged agent deployments. Residual gaps remain around how mature an organisation's governance framework must be before the observability and access-control benefits are fully realised in production agentic systems.

Context Bombing Uses Prompt Injection to Stop AI Hacking Agents

ATLAS OWASP MEDIUM ▲ 7.8 Schneier on Security Aug 14, 2026

Researchers at Tracebit have demonstrated a defensive technique called 'context bombing,' which plants prompt injections alongside cloud secrets on AWS to halt AI-driven attack agents by triggering their own guardrails. The approach reportedly reduced admin escalation attempts from 57% to 5% in testing, representing a novel inversion of the prompt injection threat. However, the technique's effectiveness is limited to LLMs with active guardrails, leaving a growing class of ungoverned, locally-run models unaffected.

OpenAI and AWS Launch Daybreak Red and Blue on Amazon Bedrock

FIRST LOOK ATLAS OWASP LOW ▲ 7.2 AWS Machine Learning Blog Aug 12, 2026

OpenAI's Daybreak Red and Daybreak Blue security-focused AI models are now available to eligible customers on Amazon Bedrock, bringing specialised offensive simulation and defensive analysis capabilities into AWS's managed AI platform. This closes a meaningful gap for defenders by providing purpose-built AI tooling for red-team automation and security operations within an enterprise-grade, governed cloud environment. Realising the full benefit will depend on organisational maturity in integrating AI-assisted security workflows and clarity around eligibility and access controls.

Stay ahead of the threat.