Axonius cut multi-tenant agent buildout from eight weeks to ten days using a runtime per customer

AWS Machine Learning Blog·medium signalXBlueskyLinkedInCopy link

AWS published Axonius's architecture for running AI agents across hundreds of isolated customer environments, using a silo model where each tenant gets a dedicated Bedrock AgentCore runtime and every user session runs in its own microVM that is terminated and memory-sanitized on completion. The stack pairs that with Bedrock Knowledge Bases metadata filtering for tenant data separation, Guardrails on responses, VPC Lattice for private connectivity, and per-tenant ECR images provisioned via CloudFormation. Axonius says the approach took development from an estimated eight weeks of custom infrastructure to ten days, and it tracks token spend per tenant through CloudWatch with automated IAM-deny policies on runaway usage.