DNS-Based Data Exfiltration Flaw Discovered in AWS Bedrock (infosecurity-magazine.com)

• DNS tunneling bypasses sandbox network isolation policies.
• Exposes internal AWS environment variables and credentials.
• Undermines trust in managed AI execution environments.

"A significant security flaw in the AWS Bedrock Code Interpreter (AgentCore) allows AI sandboxes to exfiltrate cloud environment variables and metadata via DNS queries. Even when direct internet access is restricted, the sandbox's ability to resolve DNS can be weaponized to leak sensitive credentials piece by piece. This discovery highlights the inherent risks of relying on centralized US hyperscaler infrastructure for sovereign AI workloads."