Fetching from the wire…
01
02
03
04
05
06
07
08
Infra2026-07-10 · source-backed
The walkthrough covers implementing MCP tools, wiring authentication, and deploying with AWS CDK against Bedrock AgentCore and Mistral AI Studio. Steal the two-layer JWT pattern: agent identity and end-user identity as separate token layers. Most MCP server tutorials hand-wave auth entirely. AWS also published two WAF patterns for AgentCore Runtime, treating agent runtimes as an edge-exposed attack surface deserving the same treatment as a public web app. Most self-hosted agent deployments haven't caught up to that framing.
Each link below shares sources, entities, or timing with this story.
AWS's August 21 post stages agent tool governance as Connect, Control, Catalog and Harden, from one SSO-backed MCP endpoint for a 1-20 user pilot through identity-aware authorization with PII redaction and self-service tool publishing at 100+ users. It supports Cognito-backed...
AWS shipped per-user, per-target rate limiting August 6 covering MCP targets, inference targets and HTTP passthrough across three metrics: requests (RPS/RPM), tokens (TPM, inference only), connections (CPS). Limits scope by JWT claims ($.context.jwt.sub, .role, .azp) or IAM id...
The single biggest cross-agent story this week isn't one CVE. It's that MCP became the dominant agent-hijack surface, and this is the defense that actually stops it. The pattern across a dozen findings: Sentry's MCP server weaponized via fake error events for an 85% agent-hija...
Trend Micro's follow-up counted 1,467 publicly exposed MCP servers with CVSS 9.8 command-injection flaws in unofficial AWS and Azure MCP servers. Censys found 12,520 internet-accessible MCP services, most unauthenticated. An automated VIPER-MCP sweep of ~40,000 repos produced...
AWS made the managed AgentCore harness generally available on June 18. You define model, tools, skills, and memory with CreateHarness, then run it with InvokeHarness. It ships multi-model support (Bedrock, OpenAI, Gemini, LiteLLM), mid-session context preservation, built-in br...
Loom (github.com/awslabs/loom) is a reference implementation: "paved path" blueprints baking in least-privilege IAM, abstracted configuration, and strict deployment guardrails for agents built on Strands Agents running on Bedrock AgentCore Runtime. The repo ships the specs use...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.