InjazAI

Benchling used Amazon Bedrock AgentCore Code Interpreter in VPC mode with Route 53 Resolver DNS Firewall and VPC endpoint policies to prevent data exfiltration when running untrusted AI agent-generated code across thousands of life sciences tenants.

1 min read

Benchling Secures Multi-Tenant AI Agents with Amazon Bedrock AgentCore

What happened

FAQ

What is Amazon Bedrock AgentCore?

It is a set of AWS services for building and running production AI agents, including a Code Interpreter that executes code in an isolated environment with VPC mode support for network isolation.

Why does this security model matter to MENA enterprises?

Government entities and banks in the region operate under strict data protection frameworks. This model provides per-tenant isolation and blocks DNS-based exfiltration, which is a recurring regulatory requirement.

Is VPC isolation alone enough to secure AI agents?

No. Benchling combined VPC mode with DNS Firewall and endpoint policies because network isolation alone does not stop data leaking through side channels such as DNS.

Can this approach work with other cloud providers?

The principles transfer: isolate code execution, restrict outbound traffic, and monitor DNS. The implementation depends on each provider's available services.

Source: AWS Machine Learning

AI-assisted content, human-reviewed.