Eight Attack Vectors in AWS Bedrock Agents
Date: 2026-03
Affected: Eight Attack Vectors in AWS Bedrock Agents
Attack vector: prompt-injection
Category: real-world
Severity: Medium

Unit42 identified eight validated attack vectors spanning log manipulation, knowledge base compromise, agent hijacking, flow injection, guardrail degradation, and prompt poisoning. An attacker with `bedrock:UpdateAgent` or `bedrock:CreateAgent` permissions can rewrite an agent's base prompt, forcing it to leak internal instructions and tool schemas.


Mitigations:

Architectural layers (MAESTRO):