AI agent 도구 접근을 네 단계로 통제하는 Gateway 구축법

aws bedrock-agentcore-control create-gateway \
 --name pilot-gateway \
 --role-arn arn:aws:iam:::role/GatewayRole \
 --protocol-type MCP \
 --authorizer-type CUSTOM_JWT \
 --authorizer-configuration '{ "customJWTAuthorizer": { "discoveryUrl": "https://cognito-idp..amazonaws.com//.well-known/openid-configuration", "allowedClients": ["pilot-gateway-client"] } }'

{ "mcpServers": { "enterprise-tools-gateway": { "url": "https://.gateway.bedrock-agentcore..amazonaws.com/mcp", "type": "http" } } }

// Payments deployers can deploy, but only to staging
permit ( principal, action == AgentCore::Action::"DeployCI___invoke", resource ) when {
 principal.hasTag("groups") && principal.getTag("groups").contains("repo-payments-service") /* Note: for Cognito, the claim is cognito:groups, not groups. Refer to your deployed Gateway Cedar schema for the precise tag names. */
 && context.input.environment == "staging"
};

// Read-only tools are open to any authenticated principal with a group
permit ( principal, action in [ AgentCore::Action::"TicketSearch___invoke", AgentCore::Action::"DocsSearch___invoke" ], resource ) when {
 principal.hasTag("groups")
};

{
 "contentPolicyConfig": {
  "filtersConfig": [{ "type": "PROMPT_ATTACK", "inputStrength": "HIGH", "outputStrength": "NONE" }]
 },
 "sensitiveInformationPolicyConfig": {
  "piiEntitiesConfig": [
   { "type": "EMAIL", "action": "ANONYMIZE" },
   { "type": "US_SOCIAL_SECURITY_NUMBER", "action": "BLOCK" },
   { "type": "CREDIT_DEBIT_CARD_NUMBER", "action": "BLOCK" }
 ]
 }
}

def handler(event, _ctx):
 for tool in list_registry_tools():
  datapoints = cw.get_metric_statistics(
   Namespace="AWS/BedrockAgentCore",
   MetricName="Invocations",
   Dimensions=[{"Name":"ToolName","Value":tool.name}],
   StartTime=now()-timedelta(days=30),
   EndTime=now(),
   Period=86400,
   Statistics=["Sum"],
  )["Datapoints"]
  if sum(p["Sum"] for p in datapoints) == 0:
   open_pr(f"deprecate/{tool.name}", body="No invocations in 30d; moving to LOG_ONLY, removal in 90d.")