An assistant can query inventory and place orders.
Queries may be automatic, but purchases require user intent and budget review.
Choose two designs.
Separate read and change permissions, validate tool arguments and user authorization, and require approval before high-impact changes.
Detailed explanation
Model output does not replace authorization or approval.
Model errors and injection are constrained.
Unsafe targets or quantities can be passed.
High-impact actions have an approval boundary.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 2.3のツール利用、Guardrails、認可を確認する。
Official references
What to confirm
モデルの提案と、実際の外部操作の認可・承認を分離できる。
Key points
- Tool permission
- Argument validation
- Approval
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Tool invocation
Connecting a model output to an external API, function, or business operation.
Argument validation
Checking tool parameters for required fields, types, ranges, and allowed values.