Fetching from the wire…
01
02
03
04
05
06
07
08
Infra2026-08-20 · source-backed
Each tenant gets a dedicated Bedrock AgentCore runtime, every user session runs in its own microVM that's terminated and memory-sanitized on completion, paired with Knowledge Bases metadata filtering, Guardrails on responses, VPC Lattice for private connectivity and per-tenant ECR images via CloudFormation. Token spend tracked per tenant through CloudWatch with automated IAM-deny on runaway usage. (AWS) The automated IAM-deny on runaway spend is the detail I'd copy first.
Each link below shares sources, entities, or timing with this story.
AWS made the managed AgentCore harness generally available on June 18. You define model, tools, skills, and memory with CreateHarness, then run it with InvokeHarness. It ships multi-model support (Bedrock, OpenAI, Gemini, LiteLLM), mid-session context preservation, built-in br...
AWS shipped Policy in Amazon Bedrock AgentCore to general availability across 13 regions. The breakthrough: security teams can write agent-to-tool access rules in plain English, which auto-convert to Cedar policies with automated reasoning that catches overly permissive or uns...
The walkthrough covers implementing MCP tools, wiring authentication, and deploying with AWS CDK against Bedrock AgentCore and Mistral AI Studio. Steal the two-layer JWT pattern: agent identity and end-user identity as separate token layers. Most MCP server tutorials hand-wave...
Loom (github.com/awslabs/loom) is a reference implementation: "paved path" blueprints baking in least-privilege IAM, abstracted configuration, and strict deployment guardrails for agents built on Strands Agents running on Bedrock AgentCore Runtime. The repo ships the specs use...
AWS shipped per-user, per-target rate limiting August 6 covering MCP targets, inference targets and HTTP passthrough across three metrics: requests (RPS/RPM), tokens (TPM, inference only), connections (CPS). Limits scope by JWT claims ($.context.jwt.sub, .role, .azp) or IAM id...
AWS added automatic policy refinement to Guardrails' Automated Reasoning checks: when a test fails, a refinement engine diagnoses it and proposes formal-logic changes for human approval instead of requiring hand-edited rules. Two modes: iterative refinement for rule issues, an...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.