ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Amazon DynamoDB”

13 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllAI tools & infra 7AI industry 5AI safety & security 1
SeverityAllcritical 0high 0medium 0low 0info 13

AWS limits AI agents’ data access, even when manipulated

AWS detailed propagating user authorization context through Bedrock AgentCore so downstream services enforce access controls even if the agent is manipulated via prompt injection.

AWS described an architecture for Amazon Bedrock AgentCore where user tokens and department claims are validated at runtime and propagated to DynamoDB, Bedrock Knowledge Bases, and Salesforce. Downstream services enforce authorization themselves, so a prompt-injected or buggy agent cannot retrieve data the user is not entitled to see. AWS demonstrated the pattern with a CRM use case separating Sales and Finance access and recommends IAM-backed knowledge bases for stricter isolation.

Help Net Security · 28d agoAI safety & security

AWS’s new sign-up gives accounts spend caps, email invites, and agent-set permissions

AWS's new sign-up flow gives fresh accounts agent-configured permissions, email-based team access, and per-project monthly spend caps starting at $20.

New AWS customers can sign up with Google, GitHub, or Apple identities, start with $100 in Free Tier credits, and build inside a project where AWS and coding agents automatically configure permissions and install tools like the AWS CLI and Agent Toolkit. In a demo, an agent deployed a Lambda function, DynamoDB table, and API Gateway endpoint without any manually written IAM policies. Paid projects get monthly spend limits starting at $20 that pause the project when reached, and the gradual rollout applies to new customers only.

Help Net Security · 6h agoAI tools & infra