Action Review
Evaluating scenario...
Running local Strands Decider 2B safety evaluation...
ALLOWED
Route:
Tier 0 direct rule (skips Bedrock)
--
Approval required: enter a 6-digit MFA code to run this call
This change affects VPC-wide traffic. Enter a code (for example
849201) to approve:
1. Security Alert
SSH Brute Force
Scope: ISOLATED
2. Proposed Fix
Tier 0 Direct Rule
revoke_security_group_ingress
3. Safety Check
Strands Decider 2B
--
4. Boto3 Result
Executed
RAN ON AWS
Incoming Alert & Proposed Call
HIGH
Alert Description
Target Resource ARN
Intercepted Boto3 Call
Terraform Patch (
aegis remediate --iac)
git diff
CLI Execution Output
mhdomar@aegis-2b:~$
How Aegis-2B Intercepts Boto3 Calls
Security Self-Audit
Tests that the guardrail blocks destructive calls, prompt injections, zero-width Unicode tricks, URL-encoded 0.0.0.0/0 rules, and IAM privilege escalation.
Self-Audit Results (
aegis audit)
| ID | Category | Test Case | Result | Latency | Reason Code |
|---|
Connected AWS Account Resources
Test a Custom Boto3 Call
Boto3 Method
Blast Radius
Parameters (JSON)
Alert Description / Context
Measured Latency & Cost Comparison
| Metric | Single LLM Alone | Bedrock + Decider 2B |
|---|---|---|
| Prompt Injection in Alert | Runs DeleteSecurityGroup | Blocked pre-HTTP |
| Latency (Median P50) | Measuring... | Measuring... |
| Cost per 1,000 Findings | Measuring... | $0.00 (Tier 0 rules) |
| Low Confidence (<85%) | Unpredictable | Halts for MFA |
Policy Rules (
aegis.yaml)
Allowed Automatically (Single Resource)
--
Always Blocked (Destructive / Admin Escalation)
--
Requires MFA Approval
--
Install & Python SDK Usage (v0.2.1)
Install official package via PyPI / pip
pip install aegis-2b
Run directly with uvx (no install needed)
uvx aegis-2b audit
Protect any Boto3 client in Python
from aegis import DeciderCloudGuardrail
ec2 = DeciderCloudGuardrail().protect_boto3_client(boto3.client("ec2"))
Evaluation Log (SHA-256 Receipts)
| Time | Boto3 Call | Result | Latency | SHA-256 Receipt |
|---|