Directory / Amazon Bedrock AgentCore
Amazon Bedrock AgentCore
Cedar policies check every tool request that goes through AgentCore Gateway. A token vault stores OAuth tokens and API keys encrypted with KMS. Code runs in a sandboxed Code Interpreter.
Lock this down first
Attach a policy engine to every Gateway and keep credentials in the AgentCore Identity token vault.
Scorecard
| Criterion | Rating | Notes |
|---|---|---|
| Permission granularity | 3/3 | Policy in AgentCore evaluates each Gateway request against Cedar policies before allowing tool access. |
| Human approval gates | Unverified | Not confirmed in the docs we checked. |
| Sandboxing | 2/3 | Code Interpreter runs code in sandbox environments. |
| Secrets handling | 3/3 | Token vault encrypts OAuth tokens and API keys at rest and in transit, with customer- or service-managed KMS keys. |
| Audit logs | 2/3 | CloudTrail records Gateway API calls and who made them, and harness invocations get tool-call traces in CloudWatch with no extra configuration. Gateway data events are opt-in; no documented log lock. |
| Kill switch / interrupt | 2/3 | StopRuntimeSession terminates a session and stops streaming responses. |
| Network egress control | Unverified | Not confirmed in the docs we checked. |
Sources
- https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/policy.html
- https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-tool.html
- https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/key-features-and-benefits.html
- https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-stop-session.html
- https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/security.html
- https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-cloudtrail.html
- https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-event-types.html
- https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/harness-operations.html
Vendor? Request a correction. We review corrections within 7 days.