Amazon patents system to check app security before launch

1. A system for characterizing attributes of a network-based application, the system comprising: one or more computing processors and memories for executing computer-executable instructions to implement an application characterization service, wherein the application characterization service is configured to: obtain a set of application attributes of the network-based application, wherein the set of application attributes corresponds to a configuration of the network-based application that utilizes one or more network-based services, and wherein individual attributes of the set of application attributes identify data resources utilized for operations of the network-based application; identify, for an individual attribute of the set of application attributes, a policy associated with accessing a data resource identified by the individual attribute; vectorize each attribute of the set of application attributes to generate a corresponding vectorized attribute; for each vectorized attribute, identify relevant vectorized historical attribute by: accessing a relevancy vector database, the relevancy vector database configured to store a plurality of vectorized historical attributes and associated data usage information, wherein the associated data usage information includes, for each vectorized historical attribute, historical data usage obtained from prior characterizations of the vectorized historical attributes performed for one or more other historical network-based applications, determining a vector distance between the respective vectorized attribute and each of the plurality of vectorized historical attributes stored in the relevancy vector database, identifying, from the plurality of vectorized historical attributes, a relevant vectorized historical attribute having a vector distance within a threshold distance, and determining the data usage information corresponding to the relevant vectorized historical attribute, wherein the data usage information indicates at least a security risk associated with the historical data usage; truncate the set of application attributes to reduce the number of attributes by filtering the set of application attributes based on the security risk associated with each respective vectorized historical attribute; provide the truncated set of application attributes to a generative agent comprising a context window and a prompt; perform a context window curation on the prompt to reduce information included in the prompt and generate a curated prompt that conforms to a pre-defined size associated with the context window of the generative agent; verify the one or more parameters of each attribute included in the curated prompt by determining whether each attribute included in the curated prompt identifies one or more additional parameters; and in response to determining that one or more attributes included in the curated prompt identify one or more additional parameters: identifying the one or more additional parameters; supplementing the curated prompt with the one or more additional parameters representing the policy associated with accessing the data resource identified by the respective attribute; and characterizing risks associated with the respective attribute using the supplemented curated prompt.