Fetching from the wire…
Agents2026-07-28 · source-backed
Plus fine-grained access control and customer-managed key encryption scoped per agent. Unglamorous and load-bearing: you can't systematically measure agent quality when the evidence is scattered across destinations. (AWS)
Each link below shares sources, entities, or timing with this story.
AWS made the managed AgentCore harness generally available on June 18. You define model, tools, skills, and memory with CreateHarness, then run it with InvokeHarness. It ships multi-model support (Bedrock, OpenAI, Gemini, LiteLLM), mid-session context preservation, built-in br...
AWS shipped Policy in Amazon Bedrock AgentCore to general availability across 13 regions. The breakthrough: security teams can write agent-to-tool access rules in plain English, which auto-convert to Cedar policies with automated reasoning that catches overly permissive or uns...
AWS announced August 6 that agents can now run on your own EC2 instances while AgentCore handles provisioning, patching, scaling, and lifecycle. Complements the existing microVM runtime, targeting sustained or specialized-hardware workloads that need the full EC2 instance-type...
AWS's August 21 post stages agent tool governance as Connect, Control, Catalog and Harden, from one SSO-backed MCP endpoint for a 1-20 user pilot through identity-aware authorization with PII redaction and self-service tool publishing at 100+ users. It supports Cognito-backed...
The walkthrough covers implementing MCP tools, wiring authentication, and deploying with AWS CDK against Bedrock AgentCore and Mistral AI Studio. Steal the two-layer JWT pattern: agent identity and end-user identity as separate token layers. Most MCP server tutorials hand-wave...
AWS shipped per-user, per-target rate limiting August 6 covering MCP targets, inference targets and HTTP passthrough across three metrics: requests (RPS/RPM), tokens (TPM, inference only), connections (CPS). Limits scope by JWT claims ($.context.jwt.sub, .role, .azp) or IAM id...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.