AI Agent IAM

Browse prompts in this category.

Prompts

Agent Audit Accountability and Zero Trust
Implement agent audit and zero-trust governance per the CSA Agentic Trust Framework — signed hash-chained logs, behavioral baselines, trust scoring, circuit breakers and kill switches, GDPR/SOX/HIPAA/PCI DSS mapping. Use when building agent telemetry, incident response, or compliance reporting.
Agent Authentication and Credential Security
Implement agent authentication with OAuth 2.1 client credentials plus PKCE, sender-constrained refresh rotation, SPIFFE/SPIRE X.509/JWT SVIDs, MCP authorization compliance, Vault-based credential storage, and A2A Agent Cards. Use when replacing static API keys or establishing agent-to-service auth.
Agent Authorization and Least Agency Enforcement
Implement least-agency authorization for AI agents via OPA/Cerbos/Cedar PDPs, RFC 9396 Rich Authorization Requests, Tool Manager mediation, task-scoped JIT permissions, delegation scope attenuation, and Agent Gateways. Use when designing fine-grained agent authorization or policy-as-code.
Agent Delegation and Multi-Agent Trust Security
Harden agent delegation using the ARIA model, signed scope-attenuated tokens, cascading revocation, mTLS with SPIFFE SVIDs, A2A Agent Cards, session-smuggling context grounding, and RFC 8693 token exchange. Use when wiring delegation between agents or mitigating confused-deputy risks.
AI Agent Identity and Access Management Architect
Design IAM for AI agents using CSA Agentic IAM, OAuth 2.1 with PKCE, SPIFFE/SPIRE workload identity, OPA/Cerbos/Cedar policy decision points, RFC 9396 RAR, ARIA delegation, and zero-trust audit. Use when architecting agent identity, authentication, authorization, or delegation systems.