< ciso
brief />
Tag Banner

All news with #bedrock agents tag

22 articles

Amazon Bedrock AgentCore Browser Adds OS-Level Actions

🖱️ Amazon announced that Bedrock AgentCore Browser now supports OS-level interaction capabilities to automate browser workflows beyond the Chrome DevTools Protocol (CDP). The update adds mouse and keyboard operations, full desktop screenshots, and handling for native system dialogs and print flows. It targets AI agent developers, test automation engineers, and teams building LLM-powered web interaction tools. The feature is enabled by default across all AgentCore Browser instances in the 14 supported AWS Regions.
read more →

Amazon Bedrock AgentCore: Managed Session Storage Preview

📦 Amazon Bedrock AgentCore Runtime now offers managed session storage in public preview. When configured, each session receives a persistent directory at your specified mount path so agents can read and write files as usual while the runtime transparently replicates data to durable storage. On stop, data is flushed during graceful shutdown and, when you resume with the same session ID, a new microVM mounts the same storage so source files, installed packages, build artifacts, and git history are preserved. The feature supports standard Linux filesystem operations, provides up to 1 GB per session, retains data for 14 days of idle time, and confines storage communication to a single session for isolation.
read more →

Amazon Bedrock AgentCore Runtime Adds WebRTC Support

🔊 Amazon Bedrock AgentCore Runtime now supports WebRTC for low-latency, bidirectional streaming between clients and agents, enabling real-time audio and video in browser and mobile applications. WebRTC complements existing WebSocket support by providing peer-to-peer, UDP-based media transport optimized for voice agents and other media-intensive experiences. AgentCore Runtime supports managed TURN via Amazon Kinesis Video Streams, third-party providers, or self-hosted TURN, and the capability is available in 14 AWS Regions.
read more →

Amazon Bedrock AgentCore Browser: Enterprise Policies & CA

🔒 Amazon Bedrock AgentCore now lets administrators apply Chrome Enterprise policies to AgentCore Browser and upload custom root CA certificates for both AgentCore Browser and Code Interpreter. These capabilities enable enforcement of organizational controls such as URL restrictions, disabling downloads or password managers, and implementing URL blocklists while agents operate. Custom root CA support allows agents to connect to internal systems and work with corporate TLS interception without certificate errors. The features are available in 14 AWS Regions where AgentCore is offered.
read more →

Amazon Bedrock AgentCore Runtime: Shell Command API

⚙️ Amazon Bedrock AgentCore Runtime now supports InvokeAgentRuntimeCommand, an API that runs shell commands directly inside a running AgentCore Runtime session. The API streams stdout/stderr in real time over HTTP/2 and returns an exit code, removing the need for custom in-container command orchestration. Commands execute in the same container, filesystem, and environment as the agent session and can run concurrently with agent invocations. This capability is available in 14 AWS Regions.
read more →

AWS Partner Central Agents: AI Co-sell Tools Now GA

🤖 AWS announces general availability of AWS Partner Central agents, AI-powered agentic capabilities built on Amazon Bedrock AgentCore to accelerate partner co-selling. Agents provide pipeline insights, tailored sales plays, and next-step recommendations, and can populate CRM fields from transcripts, notes, and emails. They also identify funding eligibility, pre-fill funding requests, and are available in all commercial AWS Regions.
read more →

DNS-Based Data Exfiltration via AWS Bedrock Code Interpreter

⚠️ Phantom Labs Research demonstrated a DNS-based exfiltration technique targeting the AWS Bedrock AgentCore Code Interpreter that bypasses expected Sandbox Mode network restrictions. Maliciously crafted files (for example, CSVs) can influence generated Python code to use DNS queries as a covert command-and-control channel. In tests, researchers executed commands, enumerated and retrieved S3 content and secrets while the environment still reported network access disabled. AWS says this is intended behavior and updated documentation; organisations should inventory AgentCore instances, tighten IAM roles and move sensitive workloads to VPC mode.
read more →

Amazon Bedrock AgentCore Adds AG-UI Protocol Support

⚙️ Amazon Bedrock AgentCore Runtime now supports the Agent-User Interaction (AG-UI) protocol, enabling developers to deploy AG-UI servers that deliver real-time, interactive agent experiences into user-facing applications. AgentCore Runtime handles authentication, session isolation, and autoscaling for AG-UI workloads so teams can focus on building responsive frontends. AG-UI streams text, reasoning steps, and tool results over SSE and WebSocket and is available across fourteen AWS Regions.
read more →

Amazon Bedrock AgentCore Runtime Adds Stateful MCP Server

🔔 Amazon Web Services has added stateful Model Context Protocol (MCP) server capabilities to Amazon Bedrock AgentCore Runtime, enabling server-driven elicitation, sampling, and progress notifications alongside existing support for resources, prompts, and tools. Developers can now run each session in an isolated microVM and preserve session context across interactions using an Mcp-Session-Id header. These features support interactive, multi-turn workflows and real-time updates for long-running operations.
read more →

Amazon Bedrock Enables Server-Side Tool Execution Now

🔧 Amazon Bedrock now supports server-side tool execution by integrating AgentCore Gateway with the Responses API. Customers can supply an AgentCore Gateway ARN and Bedrock will discover and invoke gateway tools during inference, eliminating client-side orchestration. Tool results are executed and streamed server-side in real time, with IAM-based access control preserved. This reduces latency and simplifies agentic workflows.
read more →

Amazon Bedrock AgentCore Browser Adds Browser Profiles

🔐 Amazon Bedrock AgentCore Browser now supports browser profiles that persist authentication state across sessions. You can authenticate once, save cookies and local storage to a profile, and reuse it to keep agents logged in without repeated manual logins. Profiles offer flexible read-only and persistent modes and enable parallel sessions to share authentication, cutting session setup from minutes to tens of seconds for high-volume automated workflows.
read more →

Amazon Bedrock Adds Server-Side Custom Tools for Responses

🔧 Amazon Bedrock now supports server-side tools in the Responses API using OpenAI API–compatible service endpoints. With Bedrock invoking tools directly rather than relying on client orchestration, AI applications can perform real-time, multi-step actions—searching the web, executing code, and updating databases—within the governance, compliance, and security boundaries of your AWS accounts. Developers may supply custom Lambda functions or use AWS-provided tools such as notes and tasks. Server-side tool use is available today for OpenAI's GPT OSS 20B and GPT OSS 120B in multiple AWS regions, with broader model and region support coming soon.
read more →

Amazon Bedrock AgentCore: Custom Chrome Extensions

🔧 Amazon Bedrock AgentCore Browser now supports Chrome-compatible extensions uploaded to Amazon S3 for automatic installation into secure browser sessions. This capability builds on AgentCore secure browser features to enable complex automation workflows that standard browser automation cannot address alone. Typical uses include custom authentication flows, automated testing, and improved navigation or performance through ad blocking. The feature is available in nine AWS Regions where AgentCore is supported.
read more →

TypeScript Preview and Updates for Strands Agents on AWS

🚀 AWS has announced TypeScript support in preview for the Strands Agents SDK, giving developers a choice between Python and TypeScript for building model-driven AI agents. The TypeScript implementation provides idiomatic, type-safe APIs with async/await and modern JavaScript/TypeScript patterns, and is designed to run in browsers, client applications, and server runtimes such as AWS Lambda and Bedrock AgentCore. AWS also introduced three SDK updates: edge device support is now GA, Strands steering is available experimentally, and Strands evaluations is in preview to help validate agent behavior.
read more →

Amazon Bedrock AgentCore Adds Policy and Evaluations

🛡️ Amazon Web Services' AgentCore introduces preview features — Policy and Evaluations — to help teams scale agents from prototypes into production. Policy intercepts real-time tool calls via AgentCore Gateway and converts natural-language rules into Cedar for auditability and compliance without custom code. Evaluations offers 13 built-in evaluators plus custom model-based scoring, with all quality metrics surfaced in an Amazon CloudWatch dashboard to simplify continuous testing and monitoring.
read more →

Bedrock AgentCore Runtime Adds Bi-Directional Streaming

🔁 Amazon Bedrock AgentCore Runtime now supports bi-directional streaming, enabling real-time, continuous conversations where agents listen and respond simultaneously and handle interruptions or context shifts mid-turn. This removes stop-start friction in voice and text agents and preserves context across exchanges. Built into AgentCore Runtime, the capability reduces months of engineering work required to implement streaming infrastructure, letting developers focus on agent experiences rather than plumbing. Available in nine AWS Regions with consumption-based pricing.
read more →

Amazon API Gateway Adds MCP Proxy for Agent Integration

🤖 Amazon API Gateway now supports the Model Context Protocol (MCP) via a proxy, enabling organizations to expose existing REST APIs to AI agents and MCP clients without modifying their applications. Integrated with Amazon Bedrock AgentCore's Gateway, the feature performs protocol translation, indexes APIs for semantic tool discovery, and eliminates the need to host additional intermediary infrastructure. It also enforces dual authentication to verify agent identities for inbound requests while managing secure outbound connections to REST endpoints. The capability is available in nine AWS Regions and follows Amazon Bedrock AgentCore pricing.
read more →

Amazon Connect Adds MCP Support for AI Agents and Tools

🤖 Amazon Connect now supports the Model Context Protocol (MCP), enabling AI-driven customer self-service and employee assistance agents to invoke standardized tools to fetch information and perform actions during interactions. Amazon Connect offers out-of-the-box MCP tools for tasks like updating contact attributes and retrieving case information, and allows flow modules to be exposed as MCP tools so business logic is reusable across deterministic and generative workflows. Organizations can also integrate custom or third-party tools via flow modules or the Amazon Bedrock AgentCore Gateway to automate actions such as order lookups, refunds, and customer-record updates without human intervention.
read more →

Amazon Bedrock AgentCore Browser Adds Web Bot Auth Preview

🔐 Amazon Bedrock AgentCore Browser now previews Web Bot Auth, a draft IETF protocol that cryptographically identifies AI agents to websites. The feature automatically generates credentials, signs HTTP requests with private keys, and registers verified agent identities to reduce CAPTCHA interruptions and human intervention in automated workflows. It streamlines verification across major providers such as Akamai, Cloudflare, and HUMAN Security, and is available in nine AWS Regions on a consumption-based pricing model with no upfront costs.
read more →

Amazon Bedrock AgentCore GA: Secure Agent Platform

🔐 Amazon Bedrock AgentCore is now generally available, offering an agentic platform to build, deploy, and operate agents securely at scale without infrastructure management. It adds VPC support, extended eight-hour runtimes, session isolation, and initial Agent-to-Agent (A2A) protocol support. Identity, Gateway, and Observability features provide secure authorization, tool discovery, and CloudWatch/OTEL monitoring.
read more →