Amazon Bedrock AgentCore의 Policy를 활용한 AI 에이전트 보안 강화

permit(
    principal,
    action == AgentCore::Action::"Target1___getPatient",
    resource == AgentCore::Gateway::"{gateway_arn}"
)
when {
    principal.hasTag("role") && principal.getTag("role") == "patient" &&
    context.input has patient_id &&
    principal.hasTag("patient_id") &&
    context.input.patient_id == principal.getTag("patient_id")
};

forbid(
    principal,
    action == AgentCore::Action::"Target1___getSlots",
    resource == AgentCore::Gateway::"{gateway_arn}"
)
when {
    context.input has date_string &&
    (context.time.hour < 9 || context.time.hour > 21)
};