AWS Bedrock AgentCore Gateway Tool Invocation Failure Burst

Last updated 2 months ago on 2026-08-10

Created 2 months ago on 2026-08-10

About

Identifies a burst of failed tool invocations against a single AWS Bedrock AgentCore Gateway within a short window. Individual tool calls fail routinely from bad input or transient upstream errors, but a concentrated run of failures against one gateway can indicate an attacker, or a compromised tool wrapper, probing a tool's parameter surface for an injection point, an authorization bypass, or a schema weakness. Failures can be attributed only to the gateway, not to a specific tool, target, or caller, and a target that is broken for every caller produces the same burst as one caller probing it, so confirm gateway and target health before treating a burst as malicious.

Tags

Domain: CloudDomain: GenAIPlatform: AWSData Source: AWS BedrockService: AWS BedrockUse Case: Threat DetectionTactic: Initial AccessThreat: Unauthorized AI UsageRule Type: ThresholdMitre Atlas: AML.T0053Profile: BetaLanguage: kuery

Severity

medium

Risk Score

MITRE ATT&CK™

Initial Access (TA0001)(external, opens in a new tab or window)

↳ Exploit Public-Facing Application (T1190)(external, opens in a new tab or window)

False Positive Examples

A tool or target that is broken or misconfigured for all callers (an upstream outage, a bad deployment, or an expired credential) produces the same failure burst as a single caller probing it, and the error events carry no caller, target, or tool identity to tell them apart. Confirm the gateway's target health and recent change history before treating a burst as adversarial, and add an exception by gateway (resource_arn) for gateways fronting known-flaky upstreams.

License

Elastic License v2(external, opens in a new tab or window)

Definition

Rule Type: Threshold Rule
Integration Pack: Prebuilt Security Detection Rules
Index Patterns: logs-aws_bedrock_agentcore.gateway_application_logs-*
Related Integrations: aws_bedrock_agentcore(external, opens in a new tab or window)
Query

✄𐘗text code block:
✄𐘗data_stream.dataset: "aws_bedrock_agentcore.gateway_application_logs" and
aws.bedrock_agentcore.gateway.payload_object.isError: "true"

Install detection rules in Elastic Security

Detect AWS Bedrock AgentCore Gateway Tool Invocation Failure Burst in the Elastic Security detection engine by installing this rule into your Elastic Stack.

To setup this rule, check out the installation guide for Prebuilt Security Detection Rules(external, opens in a new tab or window).