Google Agentic Architect - Subconcept 4.1: Cryptographic Network Perimeters & Access Control
from AI Intuition Hosted by Dan Sarmiento
Detail the zero-trust infrastructure required to secure enterprise agent runtimes. Explain how to establish VPC Service Controls (VPC-SC) to create cryptographic network perimeters enclosing models, databases, and buckets to prevent data exfiltration. Discuss the Principle of Least Privilege regarding IAM roles: explain why agents must run under downscoped identity-level service accounts (e.g., roles/aiplatform.user) rather than default project-level permissions. Finally, detail downscoped token delegation (RFC 8693 Context Propagation) to ensure database tools execute under the calling user's identity rather than a high-privilege system account.
Embed this episode
No transcript yet.