AI agents: how to restrict their internet access
AWS has described a practical way to restrict AI agents' access to external networks: AgentCore resources can be allowed to reach the internet only on pre-approved domains through AWS Network Firewall. The scheme relies on SNI inspection during the TLS handshake. This is not full protection. It is a first layer that reduces the risk of unwanted requests and makes an agent's behavior more predictable.
AI-processed from AWS Machine Learning Blog; edited by Hamidun News
AI agents are automated programs built on AI that can go online on their own. AWS has shown how to limit them to approved sites for security reasons.
Why restrict AI agents' access in a company?
Even if a model follows instructions well, it can be fed an unwanted URL or a redirect. For corporate use cases, this is a cost-control problem as well as a security one.
Why restrict AI agents' internet access?
Even if a model follows instructions well, it can be fed an unwanted URL or a redirect. For corporate use cases, this is a cost-control problem as well as a security one.
Why should AI agents' internet access be restricted?
Even if a model follows instructions well, it can be fed an unwanted URL, a redirect, or an external service that should not take part in the process. In corporate scenarios, this is a matter of both security and cost control.
How do you restrict AI agents by domain in AWS?
Resources can be configured to reach only pre-approved sites. This is a baseline security measure when deploying agents safely in a business.
What is an AI agent?
An AI agent is an automated program built on a neural network that can perform tasks on its own, including searching for and processing information on the internet.
Why does AI agents' internet access need to be restricted?
Even if a model follows instructions well, it can be tricked with an unwanted URL or a redirect. Restricting access to approved domains is a security and cost-control measure for corporate scenarios.
- Oct 31, 2026Worldwide Express hands disputed invoices to AI agents and cuts unresolved disputes by 75%
- Oct 30, 2026AWS gives coding agents a live site preview straight from an isolated session
- Oct 30, 2026MoEngage Opens 400 Private APIs to AI Agents Through AgentCore Gateway, Without Building Its Own MCP Servers
- Oct 29, 2026NVIDIA Nemotron 3.5 Super VL: 120B Parameters, 12B Active, Running on AWS
Key Questions Answered
Why restrict AI agents' access in a company?
Even if a model follows instructions well, it can be fed an unwanted URL or a redirect. For corporate use cases, this is a cost-control problem as well as a security one.
Why restrict AI agents' internet access?
Even if a model follows instructions well, it can be fed an unwanted URL or a redirect. For corporate use cases, this is a cost-control problem as well as a security one.
Why should AI agents' internet access be restricted?
Even if a model follows instructions well, it can be fed an unwanted URL, a redirect, or an external service that should not take part in the process. In corporate scenarios, this is a matter of both security and cost control.
How do you restrict AI agents by domain in AWS?
Resources can be configured to reach only pre-approved sites. This is a baseline security measure when deploying agents safely in a business.
Test Frontier LLMs & Autonomous Agents in One Workspace
Run Claude Opus 5.5, GPT-6, Gemini 3.1, and DeepSeek side-by-side in Nomad AI (nomadnet.ai) — unified model routing, deep research, and multimodal workflows under one subscription.
The AI world, distilled — once a week
Seven stories that actually mattered, hand-picked. No noise, no reposts, no press releases.
Done! Check your inbox for a confirmation.