AWS AgentCore security undone by prompt requesting credentials

What happened

Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier

Summary assembled by rule from the sources below

Sources