TL;DR: I shipped a Bedrock Agent todo chatbot and then found I could read another user's todos via prompt injection. The fix that mattered most: promptSessionAttributes is a hint, not enforcement — re
A Bedrock Agent, a WebSocket, and the parts I had to figure out along the way
Hi guys! Ever came back from a conference full of ideas... and zero time to write them down? That was me at AWS re:Invent 2024. I had notes, voice memos, and way too many ideas — but no time (or energy) to turn them into blog posts. So I built a tool...