Bedrock AgentCore Privilege Escalation via Code Interpreters

Learn how a limited user can escalate privileges in AWS Bedrock AgentCore by abusing an overprivileged code interpreter role. Exploit a misconfigured custom code interpreter by directly invoking arbitrary Python and shell commands that execute with the interpreter's IAM role permissions rather than their own limited credentials, enabling unauthorized S3 data exfiltration and control plane access. The lab teaches the security implications of overprivileged AI infrastructure, proper least-privilege controls for execution roles, and how Public vs Sandbox network modes affect the attack surface.