---
sourceDocument: Brazil Enable AI
sourceDocumentLink: https://www.servicenow.com/docs/r/intelligent-experiences

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Enable AI

ft:clusterId :

    - platai

bundleId :

    - platai

workflow :

    - Platform


---

# Configure AI agent containment automatically

# Configure automatic AI agent containment {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Connect an identity provider and the AI agent runtime platforms to AI Control Tower so a Threat Response policy can automatically contain an AI agent using kill switch protocol.

## Before you begin

Role required: sn_ai_governance.ai_steward

## About this task

To let a Threat Response policy automatically contain an AI agent using kill switch protocol, you must have:

* A connection between AI Control Tower and each AI agent runtime or infrastructure platform that hosts the agents the policy covers. These connectors are supported:
  * AWS Bedrock
  * AWS Bedrock Agent Core
  * Gemini Enterprise Agent Platform (agents with unique identities only)
  * Azure AI Foundry
  * ServiceNow Agents
  * Agent Client Collector (ACC)
* A connection between AI Control Tower and an identity provider is optional. Okta is supported.
{#gov-pol-configure-ai-agent-containment__ul_pol_containment_prereqs}

## Procedure

1. Navigate to AI Control TowerSettingsIntegrationsControl Enforcement Points.
2. Select the connector from the Available connectors sub-tab and follow the guided setup wizard.  
   For more information, see [Configuring security connections](https://www.servicenow.com/docs/07H58FaIPRdJHGp8iWlPbA "Connect AI Control Tower to the platforms where your AI agents run and to your identity provider so that policies and AI agent containment using kill switch protocol can act on agents wherever they're hosted.").

## Result

You can now create a Threat Response policy that automatically contains an AI agent using kill switch protocol on the connected platforms. For details, see [Create a Threat Response policy](https://www.servicenow.com/docs/0iBRibIuveiimV98o78C3A "Automatically contain an AI agent when a specific threat is detected.").

*[\>]: and then