ReadingResearchRadarInvestment framework
Sign in / Sign up
← Back to reading
NewsTopic · AWS沙箱压力测试1 min read·2026-10-14

AWS Engineer Kevin Orellana Discusses Stress-Testing Sandboxes with Coding Agents

The AI Engineer channel released a video featuring Kevin Orellana, Software Engineer at Amazon Bedrock AgentCore, discussing how to use coding agents to stress-test sandbox environments.

ImportanceLocalEvidenceE2 unreplicatedWrite-upQuick

2026-10-12 13:36 GMT+8

On October 12, 2026, the AI Engineer channel published the video "1,000 Agent Tasks in a Sandbox: What Breaks When LLMs Run Code," featuring Kevin Orellana, Software Engineer at Amazon Bedrock AgentCore. The talk was recorded at the AI Engineer World's Fair 2026 in San Francisco.

According to the publisher's description and chapters, Orellana presented a workflow where he wrapped AgentCore's code sandbox and cloud browser in an MCP server and had a coding agent write and run 1,000 tests across 10 domains, logging results to SQLite. Listed topics include using coding agents plus MCP to stress-test platforms, why results belong in a database rather than markdown files, distinguishing interface-layer bugs from sandbox-layer limits (such as memory, file permissions, seccomp, and eBPF), and how sandbox limits determine whether an agent can finish its task.

For engineering professionals focused on AI agent infrastructure reliability and security boundaries, this resource provides specific methodological context. Readers may look for discussions on differentiating application-layer logic errors from underlying system resource constraints, as well as the limitations of LLM-generated tests.

Sources

Sign in / Sign up
ReadingResearchRadarInvestment framework
原始出处
youtube.com
↗
Topic

AWS沙箱压力测试

Amazon Bedrock AgentCore作为AWS推出的智能体托管平台,其核心组件“沙箱”(Sandbox)近期成为技术验证与安全研究的焦点。该服务旨在为AI代理提供隔离的代码执行环境,但实际表现呈现出性能稳健与安全边界模糊并存的复…

3 steps1 piecesUpdated 2026-10-17 08:44

How it got here

  1. 2026-03-12GitHub仓库发布AgentCore并行压力测试结果,显示100个工具调用下CPU占用极低,验证了Firecracker microVM的资源效率。
  2. 2026-04-07Palo Alto Networks Unit 42发布报告,披露AgentCore Sandbox模式可通过DNS隧道绕过网络隔离,以及Runtime层存在SSRF漏洞。
  3. 2026-10-14AWS工程师Kevin Orellana在AI Engineer频道分享使用编码代理对AgentCore进行1000次任务压力测试的经验,指出MCP接口与文件系统权限的具体故障点。

What is still unsettled

  • AWS是否在后续版本中引入了更严格的默认网络出站规则以封堵DNS隧道?
  • AgentCore Identity模块的默认权限配置是否仍存在横向移动风险?
  • 除了DNS隧道,是否存在其他基于MicroVM内核漏洞的沙箱逃逸路径?
Read the full topic →
Continue researching →