LoFP LoFP / aws_bedrock_agentcore

aws_bedrock_agentcore rule

TitleTags
a tool or target that is broken or misconfigured for all callers (an upstream outage, a bad deployment, or an expired credential) produces the same failure burst as a single caller probing it, and the error events carry no caller, target, or tool identity to tell them apart. confirm the gateway's target health and recent change history before treating a burst as adversarial, and add an exception by gateway (resource_arn) for gateways fronting known-flaky upstreams.
developer or documentation content that legitimately discusses the instance metadata service or aws key formats could match. review the prompt in \"aws.bedrock_agentcore.request_payload.prompt\" to confirm intent.
documentation, examples, or test content may include sample key material. confirm whether the key is live by reviewing \"aws.bedrock_agentcore.request_payload.prompt\" and the originating session and application.
security testing, red-team exercises, or guardrail validation may intentionally send prompt-injection or credential-harvesting payloads to an agent. confirm the source session and caller, and exclude approved testing identities after validation.