AWS enables organizations to secure AI agents by restricting network access to approved domains using Network Firewall and SNI inspection

AWS Network Firewall can be configured to create an allowlist of approved internet domains for AgentCore resources

Domain-level filtering using SNI (Server Name Indication) inspection provides the first layer of defense-in-depth security

This approach helps prevent AI agents from accessing unauthorized or malicious websites while performing tasks

Organizations can implement fine-grained access controls to maintain security governance over autonomous AI agent behavior