Amazon Bedrock AgentCore Identity: What It Adds to Your AWS Account
A security reviewer’s guide to AgentCore Identity: workload identities, the inbound authorizer and the token vault, how many identities one agent really has, and what to check.
LLMjacking: How Stolen Cloud Credentials Become Someone Else’s AI Bill
LLMjacking turns a leaked cloud key into someone else’s AI bill. The CloudTrail, Azure and GCP events that reveal it, and the one reconnaissance call worth alerting on.
CloudTrail Data Events: What to Turn On, and What it Costs You to Leave Off
Which CloudTrail data events are worth paying for, in what order, how to avoid a logging loop, and the Bedrock agent events most teams have not enabled.