I think this is for people that are already authenticated right? so the bot only has access to resources that they do. I would also think there needs to be som

I think this is for people that are already authenticated right? so the bot only has access to resources that they do. I would also think there needs to be some kind of request moderation step. with at least a notification to IT. so that the bot could be locked down for that user. AWS may not offer it but somebody should. Any company open chatbot like on a website or email I would think would just have a text to json component that classifies the request and converts it to the proper data object then you would validate it just like any other json object. Then its only as weak as your api security.