Zenity Labs discloses an attack against AWS Bedrock AgentCore: a single prompt steals execution role credentials

Zenity Labs says a single prompt can compromise an exposed AWS Bedrock AgentCore Agent because IMDS is not shielded inside the microVM; one HTTP request stole execution role credentials. Author Michael Bargury retweeted and called it a particularly tricky case. The research points the attack surface to metadata service access control in cloud agent runtime environments; the specific affected configuration scope and fix status are not stated in the material.