{"data":{"id":"0062b70b-da9b-4948-83e3-8cbdd6f715da","title":"Secure AI agent access patterns to AWS resources using Model Context Protocol","summary":"This AWS blog post explains how to secure AI agents and coding assistants that access AWS resources through the Model Context Protocol (MCP). It argues that agents can do anything their granted entitlements allow, so IAM permissions must be designed as deterministic controls, and it presents three IAM security principles with policy examples.","solution":"N/A -- no mitigation discussed in source.","labels":["security","industry"],"sourceUrl":"https://aws.amazon.com/blogs/security/secure-ai-agent-access-patterns-to-aws-resources-using-model-context-protocol/","publishedAt":"2026-04-14T22:52:51.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"news","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["Amazon"],"affectedVendorsRaw":["AWS","Amazon Bedrock AgentCore","Kiro","Claude Code","Model Context Protocol"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-04-14T22:52:51.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":null,"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}