Record · corpus.blog/posts/01a08783-2995-73ce-8954-4dc0a1215905

Threat Modeling Generative AI Applications on AWS - STRIDE for RAG, Agents, and Tool Use | hidekazu-konishi.com

hidekazu-konishi.com · published 12 August 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at hidekazu-konishi.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 41
Words captured: 12,791

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://docs.aws.amazon.com/wellarchitected/latest/security-pillar/sec_securely_operate_threat_model.html

docs.aws.amazon.com

https://www.threatmodelingmanifesto.org/

threatmodelingmanifesto.org

https://aws.amazon.com/blogs/security/threat-modeling-your-generative-ai-workload-to-evaluate-security-risk/

aws.amazon.com

https://docs.aws.amazon.com/prescriptive-guidance/latest/agentic-ai-security/best-practices-dev-practices.html

docs.aws.amazon.com

https://cheatsheetseries.owasp.org/cheatsheets/Threat_Modeling_Cheat_Sheet.html

cheatsheetseries.owasp.org

https://aws.amazon.com/blogs/security/secure-ai-agent-access-patterns-to-aws-resources-using-model-context-protocol/

aws.amazon.com

https://owasp.org/www-community/Threat_Modeling_Process

owasp.org

https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/agentsec08-bp01.html

docs.aws.amazon.com

https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/agentsec01-bp02.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-sessions.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-instances-how-it-works.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-instances-security.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-security-best-practices.html

docs.aws.amazon.com

https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/agentsec06-bp03.html

docs.aws.amazon.com

https://learn.microsoft.com/en-us/azure/security/develop/threat-modeling-tool-threats

learn.microsoft.com

https://learn.microsoft.com/en-us/previous-versions/commerce-server/ee823878%28v%3Dcs.20%29

learn.microsoft.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-core-concepts.html

docs.aws.amazon.com

https://aws.amazon.com/blogs/security/securing-ai-agents-with-amazon-bedrock-agentcore-identity/

aws.amazon.com

https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/appendix-a.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock/latest/userguide/prompt-management-version-create.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-organization.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock/latest/userguide/model-invocation-logging.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/observability-configure.html

docs.aws.amazon.com

https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/agentops05-bp01.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock/latest/userguide/kb-managed-test-config.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-components.html

docs.aws.amazon.com

https://docs.aws.amazon.com/prescriptive-guidance/latest/security-reference-architecture-generative-ai/gen-auto-agents.html

docs.aws.amazon.com

https://docs.aws.amazon.com/wellarchitected/latest/generative-ai-lens/gensec05-bp01.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/policy.html

docs.aws.amazon.com

https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/agentsec02-bp01.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-resource-management.html

docs.aws.amazon.com

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-target-http-runtime.html

docs.aws.amazon.com

https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/security.html

docs.aws.amazon.com

https://awslabs.github.io/threat-composer/

awslabs.github.io

https://docs.aws.amazon.com/bedrock/latest/userguide/guardrails-permissions-id.html

docs.aws.amazon.com

https://aws.amazon.com/blogs/security/how-to-approach-threat-modeling/

aws.amazon.com

https://aws.amazon.com/blogs/security/securing-generative-ai-an-introduction-to-the-generative-ai-security-scoping-matrix/

aws.amazon.com

https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/agentsec01-bp01.html

docs.aws.amazon.com

https://docs.aws.amazon.com/wellarchitected/latest/agentic-ai-lens/agentsec05-bp01.html

docs.aws.amazon.com

https://aws.amazon.com/blogs/security/safeguard-your-generative-ai-workloads-from-prompt-injections/

aws.amazon.com

https://aws.amazon.com/about-aws/whats-new/2026/08/aws-bedrock-agentcore-runtime-instances-generally-available/

aws.amazon.com

Elsewhere on hidekazu-konishi.com (21)

AI Agent Defense in Depth Model (AIDDM) - WAF, Guardrails, Reasoning Sandbox, and Output Filter | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

OWASP Top 10 for Agentic Applications Mapped to AWS Controls - What Each Control Mitigates and What Residual Risk Remains | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Agentic RAG Architecture on Amazon Bedrock - Query Planning, Retrieval Grading, and Self-Correction with AgentCore, Knowledge Bases, and Reranking | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Amazon Bedrock Guardrails Implementation Deep Dive - Policy Types, ApplyGuardrail API, Detection Modes, and Cross-Region Guardrail Profiles | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS WAF for Generative AI - Prompt Injection Defense Implementation Patterns | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Agent Skills Security Vetting Guide - Static Inspection of SKILL.md and Malicious Skill Patterns | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AI Bill of Materials on AWS - Discovering Models, Agents, and External Endpoints | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Threat Detection for AI Workloads on AWS - What GuardDuty AI Protection Detects, What It Does Not, and How to Read a Finding | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Architecture Decision Records: Templates and Operational Patterns for Teams That Actually Maintain Them | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Responsible-AI Guardrails Architecture on AWS - Independent Content Safety with Bedrock Guardrails, Comprehend, and WAF | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AI Agent Memory Design Guide - Working, Long-Term, and Procedural Memory with Forgetting and Staleness Management | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AI Agent Engineering Glossary - Memory, Tools, Orchestration, and Protocols Explained | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Agent Interoperability Architecture on AWS - Cross-Runtime Agents with A2A, MCP, and Amazon Bedrock AgentCore Gateway | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Amazon Bedrock AgentCore Implementation Guide Part 2: Multi-Layer Security with Identity, Gateway, and Policy | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

MCP Server Implementation Reference - Anthropic, OpenAI, Google, Cloudflare, and AWS | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

IAM Policy Evaluation Logic Step-by-Step - Explicit Deny, RCP, SCP, Resource Policy, Identity Policy, Permission Boundary, and Session Policy | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Zero-Trust Network Architecture Guide - Segmentation, Inspection, and Identity-Aware Access with VPC, Network Firewall, VPC Lattice, and Verified Access | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Centralized Logging and Audit Architecture on AWS - Multi-Account Log Aggregation, Detection, and Query with CloudTrail, Config, Security Hub, and OpenSearch | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

AWS Well-Architected - Practical Self-Audit Checklist by Pillar | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

Amazon Bedrock AgentCore Cedar Policy Builder and Tester - Client-Side Cedar Authorization Policy Editor and Evaluator | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com

MCP Capability Inspector and Schema Validator Tool - Inspect tools, resources, and prompts and Flag Risky MCP Declarations | hidekazu-konishi.com Read at the source ↗

hidekazu-konishi.com