One prompt shouldn't own your cloud: scoping AWS Bedrock AgentCore credentials

A single prompt to an exposed agent was enough to take over every Bedrock AgentCore agent in an AWS account. Here is a copy-paste audit you can run today to scope your agent's IAM role down before that happens.