Right now there is no such filter, but it'up to the administrator to se the boundaries. You can deploy the AgentCore Runtime in a VPC and so you can apply whataver traffic rules you want