Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AWS has become a default infrastructure platform for many organizations. It offers scale, flexibility and a broad service portfolio. However, for managed service providers (MSPs) and cloud providers, AWS pricing can be difficult to explain, forecast and package profitably. One of the most important cost factors is AWS data transfer cost. Internet egress, or data leaving AWS for the public internet, is the most familiar example.

Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

AI is becoming part of almost everything: customer support, security operations, software development, research, analytics, internal workflows, and, most importantly, drafting emails. AI is increasingly embedded in real business processes, and that creates new risks, not to mention the level of unprecedented access mainly of these platforms to our data. Token torching (a type of Denial-of-Wallet (DoW) attack) is one emerging AI risk.

Here is a number that should stop every CISO cold. Gartner projects that by 2028, 25% of enterprise GenAI applications will face five or more security incidents per year, nearly triple the 9% recorded in 2025. The acceleration is not slowing. Meanwhile, research by OpenText and the Ponemon Institute finds that 79% of organizations have not yet reached full AI maturity in cybersecurity, meaning most enterprises are deploying generative AI without the foundational controls needed to govern it.

You can build a masking demo in an afternoon. Run a regex for credit card patterns, swap the match for XXXX, and ship it. The demo works, the compliance slide says “no PII sent to the LLM,” and everyone moves on. That demo is fooling you by leaving things out. It works because the input is a) clean (card 4111 1111 1111 1111), b) because the only sensitive thing in it is a textbook PII pattern, and c) because nobody downstream ever needs to use the value again.

In Part 1, Your AI Agent Needs to Know Who You Are, we showed how Teleport JWTs give MCP tools a verified identity for every request. This post extends that pattern to AWS, specifically to Amazon Bedrock AgentCore, where the same identity gap exists but requires a different solution stack. You ask an AI agent to list your S3 buckets. The agent calls an MCP tool. The tool reaches out to AWS. However, CloudTrail records the action under something like agentcore-bot, but not your identity.

Enterprise AI adoption has outpaced enterprise AI governance. Seventy-eight percent of organizations now use AI in at least one business function, up from 55% the year before, and most of that adoption happened before governance teams finished drafting their first policy. The result is a familiar pattern: leadership approves a rollout, security builds guardrails around the tools it knows about, and sensitive data keeps moving through channels nobody mapped.

A hybrid breach now costs an average of $5.05 million per incident, and that's 26% more expensive than breaches in traditional on-premises-only environments according to AppSecure's 2025 cloud security statistics. That number changes the conversation. Hybrid cloud security isn't a side project for infrastructure teams. It's a board-level risk issue with direct impact on resilience, audit readiness, and operating cost.

A few years ago, I was sitting across from a security leader at a large enterprise. They had just deployed their first wave of AI agents. When I asked how they were thinking about the security of it, they paused for a moment and then said something I haven’t forgotten. I felt that. Not just as a researcher, but as someone who had been in enough of those rooms to know it was not one person’s gap. It was the whole industry’s gap.

AI agent guardrails are the controls that define what an AI agent can access, which tools it can use, what actions it can take, and when human approval is required. In cloud, SaaS, CI/CD, and production environments, these guardrails are especially important because agents can inherit permissions and affect sensitive resources faster than a human operator could manually review.