How to secure AI agents on AWS: CrowdStrike Falcon Guardian

Enterprises are moving AI applications and agents into production on AWS faster than their security controls can keep up, leaving prompt injection, sensitive data leakage and malicious agent behavior exposed at the runtime layer. On November 3, 2026, at Fal.Con Europe in Barcelona, CrowdStrike announced native AI and cloud security integrations with AWS that embed protection directly into Amazon Bedrock AgentCore and Amazon ECS. Softprom is the official distributor of CrowdStrike.

What was announced

CrowdStrike is extending Falcon Guardian to Amazon Bedrock AgentCore Guardrails. AI applications and agentic workflows built on Amazon Bedrock receive protection against prompt injection, sensitive data leakage and malicious AI activity directly inside the guardrail layer, with no separate deployment.

CrowdStrike is also introducing the Falcon sensor for Amazon Elastic Container Service (Amazon ECS) Managed Instances, including managed daemons. The sensor is automatically deployed across applicable hosts as ECS environments scale, extending Falcon protection before application workloads run.

AI is changing how enterprises build and operate, and security has to move just as fast. Together with AWS, we are making security foundational to AI innovation, protecting the applications and agents customers are building and the cloud infrastructure powering them

Why this matters

For CIOs, CISOs and cloud architects, native integration eliminates the gap between where AI runs and where it is defended. Guardrail-layer protection reduces agent attack surface without re-architecting applications, while the ECS Managed Instances sensor removes manual host-level installation and reduces configuration drift as container fleets scale.

Technical details

• Falcon Guardian + Amazon Bedrock AgentCore Guardrails: inline protection against prompt injection, data leakage and malicious agent activity.
• Falcon sensor for Amazon ECS Managed Instances: automatic deployment, including managed daemons, across scaling ECS hosts.
• Coverage: AI applications, agentic workflows and underlying cloud infrastructure on AWS.
• Operational model: no separate deployment for guardrails; runtime protection before workloads start on ECS.

FAQ

What does Falcon Guardian protect inside Amazon Bedrock AgentCore?

Falcon Guardian protects AI applications and agentic workflows against prompt injection, sensitive data leakage and malicious AI activity directly within the AgentCore guardrail layer, without a separate deployment.

How is the Falcon sensor delivered on Amazon ECS?

The Falcon sensor runs on ECS Managed Instances, including managed daemons, and is automatically deployed across applicable hosts as the ECS environment scales.

Why integrate AI security natively in the cloud?

Native integration removes manual installation, reduces configuration drift and provides protection before AI workloads and agents start, closing the runtime gap between application and security teams.

Softprom and CrowdStrike

Softprom is the official distributor of CrowdStrike. Our team supports partners and customers with licensing, architecture design and deployment of the Falcon platform across endpoint, cloud and AI workloads.

Prepared by the Softprom editorial team based on vendor materials (Softprom DistriFlow). Source: original article.