Benchling 如何用 Bedrock AgentCore 隔离多租户智能体代码
How Benchling secured multi-tenant AI agents with Amazon Bedrock AgentCore
Benchling 在 Bedrock AgentCore 沙箱里跑智能体代码，再用 DNS 防火墙堵外泄，这套多层隔离方案能直接抄。
Benchling 面向数千个生命科学租户运行 AI 智能体生成的不可信科学代码，执行层放在 Amazon Bedrock AgentCore Code Interpreter 的 VPC 模式中。为防数据外泄，架构叠加 Amazon Route 53 Resolver DNS Firewall 和 VPC endpoint 策略，连 DNS 隧道这类隐蔽通道也被封住。文章逐层拆解网络隔离、DNS 过滤和端点策略的配置思路，可对照自建。
How Benchling secured multi-tenant AI agents with Amazon Bedrock AgentCore
Learn how Benchling built a defense-in-depth security architecture to run untrusted, AI agent-generated scientific code across thousands of life sciences tenants using Amazon Bedrock AgentCore Code Interpreter in VPC mode, combined with Amazon Route 53 Resolver DNS Firewall and VPC endpoint policies to block data exfiltration, including through DNS.
