"Maybe make your agents or custom-code features hack ideally zero things, including the internet", a blog post by me and the wonderful Bedrock AgentCore folks at AWS: https://aws.amazon.com/blogs/machine-learning/how-benchling-secured-multi-tenant-ai-agents-with-amazon-bedrock-agentcore/