AWS AI technology

Built on AWS, secured by design

Perixope builds on Amazon Bedrock and the AWS services your teams already use, with security and control designed in from the first day.

The AWS AI technology stack

Services are selected per project. Not every solution uses every service.

Agents should not have unrestricted access to production infrastructure.

Every Perixope agent runs with the minimum access it needs, behind guardrails, with its actions logged and, where required, approved by a person.

Identity and access: IAM roles with least privilege for every agent and tool.
Encryption: Data encrypted at rest and in transit with AWS KMS.
Secrets: Credentials kept in AWS Secrets Manager, never in prompts or code.
Guardrails: Amazon Bedrock Guardrails filter harmful, off-topic or sensitive content.
Audit: Every agent action recorded in AWS CloudTrail and application logs.
Threat monitoring: AWS Security Hub and Amazon GuardDuty watch the environment agents run in.
Data isolation: Data stays in your AWS account, inside your VPC and network rules.
Human approval: Required approval steps for any action with real impact.

Between the agent and your AWS account sit permission, policy and approval layers. The agent can only do what it has been allowed to do.

Controlled tool access