gcp-vertex-ai

Google Cloud Vertex AI / Agent Builder (ahora Gemini Enterprise Agent Platform) — seguridad y superficie ofensiva. Componentes — Workbench (notebooks que corren como SA, acceso a metadata 169.254.169.254 = SA token), custom training jobs / custom containers (code exec by design), model endpoints, Agent Builder / Search & Conversation (RAG, data stores, grounding), pipelines, feature store. Vectores — robo de SA token vía notebook+metadata, escape de custom container, prompt injection directa/indirecta en agentes RAG, exfil de modelos/datos, SSRF. Self-serve con gmail. Cruza con ai-agents-threats y saif-framework. Spanish triggers — "vertex ai", "vertex ai seguridad", "agent builder", "gemini enterprise", "vertex workbench notebook", "vertex custom container", "vertex prompt injection", "vertex rag data store", "vertex ai metadata ssrf", "atacar vertex ai".

By omespino schedule Updated 6/2/2026