Bedrock AgentCore SDK
Deploy your local AI agent to Bedrock AgentCore with zero infrastructure
Documentation ◆ Samples ◆ Discord ◆ Boto3 Python SDK ◆ Runtime Python SDK
Overview
Amazon Bedrock AgentCore enables you to deploy and operate highly effective agents securely, at scale using any framework and model. With Amazon Bedrock AgentCore, developers can accelerate AI agents into production with the scale, reliability, and security, critical to real-world deployment. AgentCore provides tools and capabilities to make agents more effective and capable, purpose-built infrastructure to securely scale agents, and controls to operate trustworthy agents. Amazon Bedrock AgentCore services are composable and work with popular open-source frameworks and any model, so you don’t have to choose between open-source flexibility and enterprise-grade security and reliability.
🚀 From Local Development to Bedrock AgentCore
from bedrock_agentcore import BedrockAgentCoreApp
app = BedrockAgentCoreApp()
from strands import Agent # or bring your agent.
@app.entrypoint
async def handler(request):
prompt = request.get("prompt")
if not isinstance(prompt, str):
raise ValueError("prompt must be a string")
agent = Agent()
async for event in agent.stream_async(prompt):
yield (event)
app.run()
Validate agent input before forwarding it to an agent framework. Keep prompts typed as strings and pass only prompt text to the agent.
What you get with Bedrock AgentCore:
- ✅ Keep your agent logic - Works with Strands, LangGraph, CrewAI, Autogen, or custom frameworks
- ✅ Zero infrastructure management - No servers, containers, or scaling concerns
- ✅ Enterprise-grade platform - Built-in auth, memory, observability, security
- ✅ Production-ready deployment - Reliable, scalable, compliant hosting
Amazon Bedrock AgentCore services
- 🚀 Runtime - Secure and session isolated compute: Get started
- 🧠 Memory - Persistent knowledge across sessions: Get started
- 🔗 Gateway - Transform APIs into MCP tools: Get started
- 💻 Code Interpreter - Secure sandboxed execution: Get started
- 🌐 Browser - Cloud-based web automation: Get started
- 📊 Observability - OpenTelemetry tracing: Get started
- 🔐 Identity - AWS & third-party auth: Get started
AG-UI Protocol Support
Deploy agents using the AG-UI protocol with zero boilerplate. A single entrypoint handler is served over both SSE (POST /invocations) and WebSocket (/ws).
from bedrock_agentcore.runtime import serve_ag_ui
# Framework agent with a .run() method — one line
serve_ag_ui(agui_agent)
Or write a custom agent with the decorator form:
from bedrock_agentcore.runtime import AGUIApp
from ag_ui.core import RunAgentInput, RunStartedEvent, RunFinishedEvent
app = AGUIApp()
@app.entrypoint
async def my_agent(input_data: RunAgentInput):
yield RunStartedEvent(thread_id=input_data.thread_id, run_id=input_data.run_id)
# ... your agent logic, yield AG-UI events ...
yield RunFinishedEvent(thread_id=input_data.thread_id, run_id=input_data.run_id)
app.run()
Install with: pip install "bedrock-agentcore[ag-ui]"
See the AG-UI protocol contract for full details.
🏗️ Deployment
AgentCore CLI (Recommended)
The fastest way to deploy your agent to Bedrock AgentCore. Install via npm:
npm i -g @aws/agentcore
Then create and deploy your agent:
agentcore create --name MyAgent --defaults
cd MyAgent
agentcore deploy
The CLI handles packaging, infrastructure provisioning, and deployment automatically. See the AgentCore CLI documentation for full details.
AWS CDK (Advanced)
The AgentCore CLI generates AWS CDK under the hood. For full infrastructure-as-code control, customize the generated CDK project directly or refer to the L1 CDK documentation.
A2A Protocol Support
Serve your agent using the A2A (Agent-to-Agent) protocol on Bedrock AgentCore Runtime. Works with any framework that provides an a2a-sdk AgentExecutor (Strands, LangGraph, Google ADK, or custom).
Strands currently uses a2a-sdk 0.3:
pip install "bedrock-agentcore[a2a]"
For A2A protocol v1, install the mutually exclusive a2a-v1 extra:
pip install "bedrock-agentcore[a2a-v1]"
from strands import Agent
from strands.a2a import StrandsA2AExecutor
from bedrock_agentcore.runtime import serve_a2a
agent = Agent(model="us.anthropic.claude-sonnet-4-20250514", system_prompt="You are a helpful assistant.")
serve_a2a(StrandsA2AExecutor(agent))
See A2A Protocol Examples for LangGraph, Google ADK, and advanced usage.
📝 License & Contributing
- License: Apache 2.0 - see LICENSE.txt
- Contributing: See CONTRIBUTING.md
- Security: Report vulnerabilities via SECURITY.md
2 maintainers
Release files for bedrock-agentcore 1.23.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| bedrock_agentcore-1.23.0.tar.gz | 1.3 MB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| bedrock_agentcore-1.23.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 1.8 MB
Release files / bedrock_agentcore-1.23.0.tar.gz
| Download URL | bedrock_agentcore-1.23.0.tar.gz |
|---|---|
| Size | 1.3 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ef2aabc50c593d5433a889cd5c3a973c1e0d13b38bf9b1b305dcf499c72855b7
|
|
BLAKE2b-256 checksum How to use checksums |
1122a46a3e0e5147558916558570c86df6a0dcd1887b0d003199dbef401099f5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 11, 2026.
Transparency logRelease files / bedrock_agentcore-1.23.0-py3-none-any.whl
| Download URL | bedrock_agentcore-1.23.0-py3-none-any.whl |
|---|---|
| Size | 519.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
24581e548441efa3ecacbed1562f4cca68689f27ff84fd0ee6815d0ef33cd18d
|
|
BLAKE2b-256 checksum How to use checksums |
b69b32b5ef3163f629ce9de7ef3695a3f34fab1dcba07835409651fd630adb61
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Sep 11, 2026.
Transparency log
