Amazon Bedrock AgentCore

AWS lifecycle notice (June 30, 2026) — Amazon Bedrock Agents Classic is now Bedrock Agents Classic, in maintenance for new customers after July 30, 2026. Net-new agent builds should use Bedrock AgentCore. Full matrix: lifecycle roundup.

Definition

Amazon Bedrock AgentCore is AWS’s managed agent runtime and infrastructure layer for production AI agents. It separates agent logic (your code, LangGraph, CrewAI, Strands, or custom frameworks) from agent operations: session-isolated execution, memory, tool gateways, browser automation, sandboxed code interpretation, identity, observability, and Managed Harness (GA June 17, 2026). AgentCore reached general availability in 2025 and, as of July 2026, is the recommended path for net-new agent builds when a Bedrock prototype needs scaling, audit trails, and compliance-friendly isolation. You still choose underlying foundation models (Claude Sonnet 5, Sonnet 4.6, Nova, Llama) for reasoning — AgentCore is not a model.

When to use it

• Production deployment of multi-step agents after local prototyping — need concurrency, session isolation, and managed scaling.
• Framework portability — keep LangGraph/CrewAI/Strands orchestration but offload memory, tools, and traces to AWS-managed primitives.
• Compliance-sensitive agents (HIPAA, SOC 2) requiring auditable tool calls, identity per agent action, and CloudWatch/OpenTelemetry traces.
• Long-running sessions with AgentCore Memory — short-term conversation state and long-term semantic recall without custom vector-plus-summary pipelines.
• Tool-rich agents exposing existing REST APIs, Lambda functions, and AWS services through AgentCore Gateway with auth and throttling.

When not to use it

• Single-turn Bedrock Converse calls — invoke the model API directly; AgentCore adds latency and cost overhead.
• Read-only RAG Q&A — Bedrock Knowledge Bases alone is simpler.
• Hard sub-second latency SLAs — serverless agent runtime cold starts are measured in seconds; warm pools and design matter.

Tips

• Scope AgentCore Identity IAM roles per tool — never attach broad * policies to the agent execution role.
• Use AgentCore Gateway to wrap legacy APIs with consistent auth, rate limits, and CloudTrail logging instead of embedding credentials in agent code.
• Enable Observability early — trace replays shorten debugging time for non-deterministic agent failures.
• Treat Browser and Code Interpreter tools as high-risk — restrict to trusted prompts and sandbox networks.
• Keep business logic in your framework; use AgentCore for cross-cutting runtime concerns only.

Gotchas

Serious

• Over-privileged agent roles — a compromised agent with wide IAM access becomes an automated lateral movement tool.
• Skipping human approval on write tools — agents that mutate production data need confirmation steps or policy gates.

Regular

• Building custom memory on DynamoDB when AgentCore Memory fits — reinvents summarization, recall ranking, and retention policies.
• Confusing AgentCore with Bedrock Agents Classic — Agents Classic (maintenance for new customers July 30, 2026) is the November 2023 orchestration model; AgentCore is the managed runtime for net-new custom agent builds.
• Ignoring cold start in UX — first message in a session may lag; set user expectations or keep sessions warm where cost allows.

Official references

• What is Amazon Bedrock AgentCore?
• AgentCore Runtime
• AgentCore Memory
• AgentCore Gateway

Related FactualMinds content

• Amazon Bedrock Consulting
• Generative AI on AWS
• Amazon Bedrock