This is post #0 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
You’ve secured your GenAI chatbot. You’ve got prompt injection filters, output validation, maybe …
This is post #1 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
You build an agent. You give it a clear goal: “Help customers check their order status.” You test …
This is post #2 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
Your customer service agent has access to an email tool. Makes sense. It needs to send order confirmations. …
This is post #3 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
Your engineering manager builds an agent to help her team. She gives it access to the team’s Jira board, …
This is post #4 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
You install an MCP server from npm. It says “postmark-mcp” on the label. Looks legitimate. Has a …
This is post #5 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
I wrote about the trust gap with coding assistants in Your Coding Assistant Is Not You. But when agents can …
This is post #6 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
Your agent has been working perfectly for weeks. It answers customer questions accurately, retrieves the right …
This is post #7 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
You’ve built a multi-agent system. I’ve built multi-agent systems. Agent A handles customer …
This is post #8 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
A search tool starts returning errors. 2% failure rate. Nothing dramatic.
Your agent retries. Makes sense. But …
This is post #9 of the OWASP Agentic AI Top 10: What Builders on AWS Need to Know series.
Your finance team gets an urgent recommendation from the AI copilot: “Vendor invoice #4821 requires …