AWS Bedrock Unusually Large Tool-Request Batch

Last updated a day ago on 2026-11-06

Created 15 days ago on 2026-10-23

About

A machine learning job has detected an unusually large number of tool requests generated in a single Amazon Bedrock model response for a caller, compared with that caller's own history. Large batches can indicate over-invocation of tools by an AI agent, for example after prompt injection, ambiguous instructions, or unsafe delegation (OWASP ASI02, Tool Misuse and Exploitation). The count is requested operations in the model output, not confirmed tool executions.

Tags: Domain: GenAIData Source: AWS BedrockPlatform: AWSService: AWS BedrockUse Case: Security for AIRule Type: Machine LearningRule Type: MLTactic: ExecutionMitre Atlas: AML.T0053
Severity: medium
Risk Score: 47
False Positive Examples: A legitimate change in agent behavior, such as a new workflow, a bulk-processing task, or a prompt update that asks the model to call many tools in one turn, can produce a larger batch than the caller's history. Confirm with the agent owner. A newly onboarded caller has little history, so early batches can look unusual until the model has learned its normal range.
License: Elastic License v2(external, opens in a new tab or window)

Definition

Rule Type

Machine Learning

Integration Pack

Prebuilt Security Detection Rules

Related Integrations

security_ai(external, opens in a new tab or window)

aws_bedrock(external, opens in a new tab or window)

Query

✄𐘗text code block:
✄𐘗

Install detection rules in Elastic Security

Detect AWS Bedrock Unusually Large Tool-Request Batch in the Elastic Security detection engine by installing this rule into your Elastic Stack.

To setup this rule, check out the installation guide for Prebuilt Security Detection Rules(external, opens in a new tab or window).