Record · corpus.blog/posts/01a08783-2995-73ce-8954-4dc09f278e28

Agent Sandboxing and Blast-Radius Isolation on AWS - Choosing the Unit of Each Containment Boundary and What Each One Does Not Stop | hidekazu-konishi.com

hidekazu-konishi.com · published 17 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hidekazu-konishi.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 54
Words captured: 11,549

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

AI-Assisted Security Testing on AWS - What You Approve, What You Can Only Stop, and What the Findings List Hides by Default | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AI Agent Defense in Depth Model (AIDDM) - WAF, Guardrails, Reasoning Sandbox, and Output Filter | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

OWASP Top 10 for Agentic Applications Mapped to AWS Controls - What Each Control Mitigates and What Residual Risk Remains | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Agent Skills Security Vetting Guide - Static Inspection of SKILL.md and Malicious Skill Patterns | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Threat Modeling Generative AI Applications on AWS - STRIDE for RAG, Agents, and Tool Use | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Multi-Tenant Generative AI SaaS Architecture on AWS - Tenant Isolation, Per-Tenant Knowledge Bases, and Guardrails with ABAC | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AI Agent Memory Design Guide - Working, Long-Term, and Procedural Memory with Forgetting and Staleness Management | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

How AWS Lambda Execution Environments Work - Firecracker MicroVMs, Lifecycle Phases, and SnapStart Internals | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS SaaS Multi-Tenant Architecture Guide - Tenant Isolation, Pool and Silo Models, Onboarding, and Metering | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

OWASP Top 10 for Large Language Model Applications Mapped to AWS Controls - What Each Control Covers, Where It Stops, and What the Application Still Owns | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Amazon Bedrock AgentCore Harness - The Managed Agent Loop and the Export-to-Code Boundary | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Workload Isolation Levels on Amazon EKS - Which Level You Stopped At, and What That Level Does Not Stop | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

IAM Policy Evaluation Logic Step-by-Step - Explicit Deny, RCP, SCP, Resource Policy, Identity Policy, Permission Boundary, and Session Policy | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Agentic Payments on AWS - Where the Spending Limit Is Enforced, and What It Does Not Stop | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Amazon GuardDuty Extended Threat Detection Architecture - Attack Sequences, Runtime Monitoring, and Response Automation | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Amazon Bedrock AgentCore Implementation Guide Part 2: Multi-Layer Security with Identity, Gateway, and Policy | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-security-best-practices.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-how-it-works.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-sessions.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-instances-how-it-works.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-instances-security.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-session-characteristics.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-resource-management.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/browser-tool.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-create-a-memory-store.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-gateway-fgac.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agentcore-vpc.html

docs.aws.amazon.com

https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-runtime-networkconfiguration.html

docs.aws.amazon.com

https://aws.amazon.com/blogs/networking-and-content-delivery/network-connectivity-patterns-for-agents-deployed-on-amazon-bedrock-agentcore-runtime/

aws.amazon.com

https://docs.aws.amazon.com/lambda/latest/dg/lambda-microvms-guide.html

docs.aws.amazon.com

https://docs.aws.amazon.com/lambda/latest/dg/microvms-launching.html

docs.aws.amazon.com

https://docs.aws.amazon.com/lambda/latest/dg/microvms-networking.html

docs.aws.amazon.com

https://docs.aws.amazon.com/lambda/latest/dg/microvms-security.html

docs.aws.amazon.com

https://docs.aws.amazon.com/lambda/latest/dg/microvms-monitoring.html

docs.aws.amazon.com

https://docs.aws.amazon.com/lambda/latest/dg/microvms-troubleshooting.html

docs.aws.amazon.com

https://docs.aws.amazon.com/help-panel/lambda/latest/console/lambda-microvm-create-execution-role.html

docs.aws.amazon.com

https://docs.aws.amazon.com/help-panel/lambda/latest/console/lambda-microvm-create-idle-policy.html

docs.aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2026/06/aws-lambda-microvms/

aws.amazon.com

https://aws.amazon.com/blogs/compute/secure-code-execution-for-ai-agents-with-aws-lambda-microvms/

aws.amazon.com

https://docs.aws.amazon.com/lambda/latest/dg/tenant-isolation.html

docs.aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2025/11/aws-lambda-tenant-isolation-mode/

aws.amazon.com

https://docs.aws.amazon.com/whitepapers/latest/security-overview-aws-lambda/lambda-isolation-technologies.html

docs.aws.amazon.com

https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_revoke-sessions.html

docs.aws.amazon.com

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html

docs.aws.amazon.com

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-event-reference-user-identity.html

docs.aws.amazon.com

https://repost.aws/knowledge-center/iam-role-chaining-limit

repost.aws

https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html

docs.aws.amazon.com

https://docs.aws.amazon.com/kms/latest/developerguide/conditions-kms.html

docs.aws.amazon.com

https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resolver-dns-firewall-overview.html

docs.aws.amazon.com

https://aws.amazon.com/blogs/security/prevent-data-exfiltration-aws-egress-controls-for-cloud-workloads/

aws.amazon.com

https://aws.amazon.com/blogs/security/establishing-a-data-perimeter-on-aws-allow-only-trusted-resources-from-my-organization/

aws.amazon.com

https://aws.amazon.com/blogs/security/securing-ai-agents-with-amazon-bedrock-agentcore-identity/

aws.amazon.com