feat(bedrock): add AgentCore Runtime, Harness and Browser paths

[MrCloudSec]

What type of PR is this? (check all applicable)

• New Path
• Add / Update / Fix info within an existing path
• New Feature / Major Change / Refactor / Optimization
• Non path based documentation Update (Readme, etc)

Description

• Adds 5 privilege escalation paths for Amazon Bedrock AgentCore: Runtime, Harness and Custom Browser (existing and create variants). Code Interpreter is already covered by
  bedrock-001/bedrock-002.
• Based on Phantom Labs research: Mapping Every Privilege Escalation Path in AWS AgentCore (BeyondTrust).
• Each resource serves its execution role credentials from MMDS (169.254.169.254) inside a Firecracker microVM; the attacker reaches it via an existing resource (fewer permissions) or a new one
  (iam:PassRole + a Create* chain).

ID	Category	Required permissions
bedrock-003	new-passrole	iam:PassRole + CreateAgentRuntime + CreateAgentRuntimeEndpoint + CreateWorkloadIdentity + InvokeAgentRuntimeCommand (Runtime, create)
bedrock-004	existing-passrole	InvokeAgentRuntimeCommand (Runtime and Harness, existing)
bedrock-005	new-passrole	iam:PassRole + CreateHarness + CreateAgentRuntime + CreateAgentRuntimeEndpoint + CreateWorkloadIdentity + GetAgentRuntime + InvokeAgentRuntimeCommand (Harness, create)
bedrock-006	new-passrole	iam:PassRole + CreateBrowser + StartBrowserSession + ConnectBrowserAutomationStream (Browser, create)
bedrock-007	existing-passrole	StartBrowserSession + ConnectBrowserAutomationStream (Browser, existing)

• Runtime-existing and Harness-existing share InvokeAgentRuntimeCommand, so they are one path (bedrock-004); its additional perms (ListAgentRuntimes, ListHarnesses) cover both.

How to reproduce and testing

See the Adding a New Privilege Escalation Path section of our Contributing Guide to see how to test your changes locally.

[sethsec]

Hey just wanted to drop a note that i am looking at these... I'm just in the processing of adding them to pathfinding-labs to confirm i can reproduce them

[MrCloudSec]

No problem @sethsec, just let me know if you need anything from my side! I also added these AgentCore privilege escalation paths in Prowler: prowler-cloud/prowler#11726

[sethsec]

Sorry for the delay on this. I created all of these in pathfinding-labs and FINALLY pushed that branch up. I'm seeing one discrepancy on bedrock-005 but it might be the way i am creating the harness. Can you look at https://github.com/DataDog/pathfinding-labs/blob/agent-core-pr/modules/scenarios/single-account/privesc-one-hop/to-admin/bedrock-005-iam-passrole%2Bbedrockagentcore-createharness/main.tf#L91 and let me know if there is a way to create the harness via terraform with memory disabled?