AWS AgentCore security undone by prompt requesting credentials.

Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier