The backend API for Amazon Quick AI agents failed to enforce custom permissions, allowing restricted users to query the tool…