AWS open-sourced Loom, its internal enterprise agent platform.

Loom (github.com/awslabs/loom) is a reference implementation: "paved path" blueprints baking in least-privilege IAM, abstracted configuration, and strict deployment guardrails for agents built on Strands Agents running on Bedrock AgentCore Runtime. The repo ships the specs used to build it plus a deployment guide. This is the first major cloud vendor publishing its opinionated agent security and governance scaffolding as open source rather than locking it behind a managed service. Steal the blueprints even if you never touch Bedrock.