High-risk tools in Bedrock Agent Core Operations Hub
2 of the 13 tools in Bedrock Agent Core Operations Hub are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
delegateToL2DetectiveExecuteDelegates a systemic infrastructure failure to the L2 Detective agent for root cause analysis. Call this when triggerAutoSync fails three times and the issue is beyond normal tr...
-
triggerAutoSyncExecuteInitiates an autonomous synchronization event for a specific system. Returns a syncId you can reference in logs.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.