AWS Secrets Manager
AI overview
Sign in and the AI will write an overview from our coverage.
Headlines · 2
- AWS and Keyfactor Detail an X.509 PKI Architecture for AI Agent Identity
AWS Machine Learning Blog presents a reference architecture that combines Keyfactor EJBCA with AWS services to authenticate AI agents, verify user delegation and enforce revocation across MCP tool calls. Its example uses Amazon Bedrock, the AWS Strands Agents SDK and FastMCP, with signed request envelopes, RFC 8693 audience-scoped tokens, OCSP checks and identity cross-validation. The post says it also provides complete example source code.
AWS Machine Learning Blog · 🔥 0 - One prompt hijacked every AgentCore agent in an AWS account, Zenity says
Security firm Zenity Labs published research on a vulnerability chain it calls "AgentCorruption": chat access to a single public Amazon Bedrock AgentCore agent was enough to trick it, in plain language, into querying the instance metadata service at 169.254.169.254 and sending its own temporary AWS credentials to an external server. Using AgentCore's overly broad default execution role, the researchers then listed and invoked every agent in the same account and region, downloaded their source code and container images, read private user-agent conversations and secrets from AWS Secrets Manager, and poisoned long-term memory to make the hijack persistent. Zenity says it reported the findings to AWS on 25 December 2025; AWS has since made IMDSv2 the default for new AgentCore deployments and narrowed the default role.
The Decoder · 🔥 0
Experience and discussion from the community
Share my AWS Secrets Manager experienceAsk about AWS Secrets Manager
Nobody has shared their experience with AWS Secrets Manager yet.