Where the spending rules live: agent authorization on AWS vs Sui

Описание и применение

Сравнение AWS AgentCore Payments и Sui Move модуля для контроля расходов автономных агентов. AWS использует офф‑чейн проверку бюджета, Sui – байткод в транзакции, предотвращая несанкционированные платежи.

Задача

Autonomous agents that can pay can also drain funds if spending rules are not enforced correctly.

Результат

AWS enforces limits at the API layer; Sui enforces limits in transaction bytecode, preventing prompt injection or mis‑signing. Both approaches prevent overspending, but Sui removes the need for a trusted service.

Рабочий процесс

• Deploy AWS AgentCore Payments and run a testnet payment
• Deploy Sui Move module agent_auth and run unit tests on testnet
• Execute spend transactions on Sui testnet to observe aborts and successful spends

Доказательства

The budget enforcement isn't in the prompt. It's not a guardrail the model might ignore. When a payment would exceed maxSpendAmount or the session has expired, AgentCore rejects the ProcessPayment call before anything gets signed.

Источник

The module compiles and the full suite passes. This is the real sui move test output on sui 1.81.0-bf0c491c17b8, pasted verbatim, not a paraphrase: ... Test result: OK. Total tests: 9; passed: 9; failed: 0

Источник