Zenity Labs 披露针对 AWS Bedrock AgentCore 的攻击：单条提示词窃取执行角色凭证
AI 导读
Zenity Labs 称，一条提示词即可攻破暴露的 AWS Bedrock AgentCore Agent，原因是 microVM 内未屏蔽 IMDS，一次 HTTP 请求就窃取了执行角色凭证，作者 Michael Bargury 转发并称这是尤其棘手的一例。该研究将攻击面指向云上 Agent 运行环境的元数据服务访问控制，具体受影响的配置范围和修复状态未在材料中说明。
正文
this was a particularly nasty one. if you're building agent in the cloud.. sorry and enjoy! :)
@_d1voy @lana__salameh @tamirishaysh @p1njc70r
New research: one prompt to one exposed AWS Bedrock AgentCore agent collapsed the entire cloud security model.
IMDS wasn't blocked inside the microVM. One HTTP request stole the execution role credentials.
#ZenityLabs #AgentSecurity #AWS在 X 查看被引用的帖子