Bedrock Agents Code Interpreter Execution Environment?

Question

The documentation for Bedrock Agents Code Interpretation says that it runs in a sandboxed environment, but what does that mean precisely? Does the python interpreter that the agent can use have access to the internet? Does it have access to any network resources?

From a security perspective, we're trying to understand whether there is any risk that an agent that we give code interpreter access to could exfiltrate sensitive data from an attached file or the prompt itself

Riku_Kobayashi · Accepted Answer

Hello.

Code executed in the Bedrock Agent Code Interpreter's sandbox environment does not have access to the internet.  
Therefore, it cannot be linked to AWS services or external services.

For example, if you give the instructions "Install boto3 with pip install and display a list of ec2 instances," the code will be created, but after execution you will see an error.  
I tried running it multiple times, but I received a response saying that there was no Internet connection and boto3 could not be installed, so it seems that the sandbox environment does not have an external connection.

Bedrock Agents Code Interpreter Execution Environment?

Add your answer

Relevant content