AI Agents Need More Than Identity for Secure Enterprise Deployment
While 69% of enterprises still use AI agents with shared credentials, a practice linked to increased security incidents, fixing identity alone is insufficient for secure deployment. According to Mukesh Karki, CTO of NTT DATA AIVista, and Mayank Upadhyay, chief security and trust officer at Snowflake, enterprises must also implement action-level authorization and tamper-resistant audit trails for each agent interaction. This is crucial for proving compliance to auditors, which is essential for operating in regulated environments.
The issue stems from applying traditional software assumptions to agentic AI. Unlike deterministic traditional software, agentic AI can constantly reconfigure itself. Granting agents excessive permissions leads to unintended side effects due to their exploratory nature. Embedding single, static API keys is particularly risky, as it grants the agent the combined permissions of all users and hinders forensic attribution when errors occur.
For regulated sectors like insurance, healthcare, and finance, scoped credentials are just the baseline. Agents must operate within specific jurisdictional and organizational rules, with permissions tailored to the exact actions they perform. The analogy of AI agents to employees breaks down because establishing trust with thousands of agents is impractical. Instead, they should be treated more like interns, requiring constant oversight. Secure agent governance requires a three-layer approach: the agent layer (identity, tool permissions), the model layer (prompt injection defense, VPC deployment), and the data layer (least-privilege access, RBAC). Enterprises should prioritize auditing static secret permissions and addressing shadow AI. Building provability from the ground up is essential, as retrofitting these security measures into existing agentic systems is extremely difficult.
The increasing adoption of AI agents in enterprise settings highlights a critical gap between rapid deployment and robust security governance. While identity management is a foundational element, the inherent exploratory nature of agentic AI necessitates a more sophisticated, multi-layered security framework. The discussion emphasizes the tension between enabling agent autonomy for efficiency and maintaining control to prevent unintended consequences and ensure accountability. Organizations must proactively embed granular authorization, immutable audit trails, and context-aware rule enforcement into agent design from the outset. Failure to do so risks not only security breaches and regulatory non-compliance but also undermines the very trust required for scaling these advanced systems. Future-proofing AI agent deployment will depend on developing dynamic governance models that adapt to the evolving capabilities and operational contexts of these autonomous systems.
AI-generated to prompt reflection — not editorial opinion, not advice, not a statement of fact. How this works.