AWS Bedrock AgentCore "Agent God Mode" Privilege Escalation
Date: 2026
Affected: AWS Bedrock AgentCore "Agent God Mode" Privilege Escalation
Attack vector: other
Category: real-world
Severity: High

AgentCore starter toolkit's auto-create logic generates IAM roles with overly broad account-wide permissions. A compromised agent can list all Code Interpreters, pivot to high-privileged targets, pull images from any ECR repository, and create new Code Interpreters running under the agent's IAM role. AWS recommends custom least-privilege IAM roles, but the default path is insecure.


Mitigations:

Architectural layers (MAESTRO):