Home > Hands-On Labs > Lab 

🧪Hands-On Lab
Help/Info

Amazon Bedrock AgentCore Code Interpreter PrivEsc

This lab is only accessible to Cybr Premium members

View Plans or Login

Comments

Responses

Your email address will not be published. Required fields are marked *

  1. # Create custom code interpreter using the discovered role
    ~ $ aws bedrock-agentcore-control create-code-interpreter \
    –region us-east-1 \
    –name “custom_agent_interpreter” \
    –network-configuration ‘{“networkMode”:”PUBLIC”}’ \
    –execution-role-arn arn:aws:iam::$(aws sts get-caller-identity –query Account –output text):role/AgentCodeInterpreterRole

    For some reason I get access denied even with the correct profile:

    aws: [ERROR]: An error occurred (AccessDeniedException) when calling the CreateCodeInterpreter operation: User: arn:aws:iam::014498641506:user/AgentCoreAttacker is not authorized to perform: bedrock-agentcore:CreateCodeInterpreter

What's a Hands-On Lab?

1-Click Deployments
AWS lab environments at the click of a button. Skip the hassle of creating or managing practice accounts and dive straight into using real resources.

Practical Learning
Learn cloud security with real AWS resources and real-world scenarios, not just theory.

Risk Free
No surprise bills when you forget to delete learning resources, and keep vulnerable training environments safely isolated from your corporate and production resources.