get_patient_dicomweb_studies

What get_patient_dicomweb_studies does on AWS

AI agents call get_patient_dicomweb_studies to retrieve information from AWS without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_patient_dicomweb_studies is rated Low

This tool retrieves medical imaging data (DICOM studies) associated with a patient. While the operation itself is read-only with no side effects, the sensitivity is elevated to 'medium' severity due to the handling of Protected Health Information (PHI) and medical records. An AI agent with unrestricted access could exfiltrate sensitive patient data.

From the tool's definition Tool name 'get_patient_dicomweb_studies' indicates retrieval of DICOM medical imaging studies for a patient via the DICOMweb standard. The verb 'get' and 'studies' (plural noun for data retrieval) suggest a read operation.

The rule that runs get_patient_dicomweb_studies safely

PolicyLayer is an MCP gateway: it sits between your AI agents and AWS, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_patient_dicomweb_studies, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_patient_dicomweb_studies": {}
  }
}

Questions about get_patient_dicomweb_studies