AI agents now cross identity, tool, data, and infrastructure boundaries whenever they act on a user's behalf. AWS implementation guidance and attack activity observed by Wiz show why security controls must follow the complete path from user to model to tool.