A Deterministic Backstop for Your Agent: AgentCore Policy and Cedar
18 min read
Part 5 of the series ‘Building a Partner Sales Agent on Amazon Bedrock AgentCore’: how the Cedar policy engine bound to the Gateway deterministically blocks two specific bad calls, why a default-deny engine forces a baseline permit before any forbid rule, and exactly where its blindness to conversation history leaves a human-approval guard that verifies the flag but not the approval behind it.