Repository navigation
Module 11 Amazon Bedrock AgentCore
Runtime, memory, identity, gateway, observability — agents as deployed services.
Module 11 of 16 · track Ship · Estimated time: 8–10 hours · Prerequisites: Modules 05–06. Module 08 for the LangGraph deployment.
Everything so far ran in a notebook. AgentCore is how an agent becomes a service with an identity, a memory store, a gateway, traces and a bill. This module deploys agents three ways — Strands, LangGraph, and no framework at all — so you can see the runtime is framework-agnostic.
Open the module on GitHub ↗: the slides, notebooks, exercises and solutions are there. This page is the reading order, with the tutorial and the workbench alongside.
The lesson that frames this module is P3 Run & Learn: How to Run an AI Agent in Production Safely (7 min): what running an agent as a service asks of the team. Then try the two-number report builder in the workbench: the same decision, with your numbers.
- Deploy an agent to AgentCore Runtime and invoke it as a service
- Wire AgentCore Memory and reason about retention
- Configure identity and tool access with least privilege
- Route traffic through the gateway and read the traces
- Estimate runtime cost and capacity before you commit
| Portable GenAI concepts | AWS-specific surface |
|---|---|
| Agent as a service | Bedrock AgentCore Runtime |
| Session and identity | AgentCore Memory |
| Observability | AgentCore Identity |
| Harness engineering | AgentCore Gateway |
| AgentCore Observability | |
| CloudWatch | |
| IAM | |
| CDK |
Portable concepts transfer to any stack. The AWS column is where this module touches the cloud — see docs/concepts/portability-matrix.md.
📖 read 💻 run ✏️ practise 📊 workbook 🔖 reference
These exercises are graded against a rubric rather than an answer key. Each one is a fresh domain (not TravelMind) with layered Base / Stretch / Advanced targets, and each ends with:
- a self-check rubric scored out of 100, so you can grade your own work honestly
- a pass/fail LLM-integrated task that is required regardless of how far you got
- facilitator and TA notes in an appendix, if you are running this for a group
README_exercises.md explains how the three map onto the notebooks.
src/MyFirstRuntimeAgent is a complete CDK-managed AgentCore project — app code, infrastructure, and configuration.
- Deploying without a memory retention decision. Storage grows, and so does the bill.
- Over-broad IAM on the runtime role. Scope tools to what the agent actually needs.
- Skipping observability until something breaks in production.
Every error anyone has hit in this course is in the Error Index, by the exact string. Model access and region problems are in Model and Region Notes. If it is a question rather than an error, check the answered ones first, then ask in Q&A.
Frameworks
- Blast Radius Grid — Scope identity per tool, not per agent
- Cost Cliff Map — What bills while it exists, and what bills per use
- Reversibility Test — Four things must roll back together
Quick reference
- AgentCore — The five primitives
- IAM for agents — Least privilege that actually holds
- Observability — The three vital signs
Recipes and procedures
- Deploy any agent to AgentCore — Framework-agnostic deploy path
← Module 10 · RAG, OpenSearch and LiteLLM · All modules · Module 12 · A2A and A2UI: Agent Interoperability →
✏️ This page is generated from modules/11-bedrock-agentcore/README.md. To change it, edit the module README: an edit made here is replaced at the next sync.
This wiki is the connective layer. The repository is canonical and versioned; these pages are the cross-surface maps and the notes that change too often to live in a reviewed file. Anyone can edit — see Editing this wiki.
▶ Start here · 55 lessons, on the site ↗
- Getting started · 2
- Agentic PDLC fundamentals · 9
- Methods decoded · 7
- Running delivery · 13
- By role · 9
- Teams and organisation · 4
- Practice · 4
- Interviews and careers · 7
The method
The Agentic PDLC
The Eight Loops
Gates & Governance
The Evidence Pack
The journey · end to end
Product manager
Solution architect
Engineering lead
QA lead
DevOps & platform
The method · by role
Product manager
Solution architect
Engineering lead
QA lead
DevOps and platform
Sponsor
How to
Run an NFR workshop
Design an agent on paper
Build, buy or borrow
Cut sprints into bolts
Review by risk band
Prove the bar
Control the token bill
Hold the security boundary
Run a missing-control postmortem
Reference
Mental Models
Glossary
Formulas & Calculators
Decision Trees
Scenario Library
Exercises & Answers
Anti-Patterns
Sources & Confidence
Where do I find…?
The 16 modules
- Agentic Foundations
- LLM Intuition and the AWS Bridge
- Amazon Bedrock Essentials
- Amazon Bedrock Agents
- Agent Builder, Knowledge Bases and Guardrails
- The Agent Loop: No Framework to Strands
- Strands Foundations: Tools, Memory and MCP
- Multi-Agent Patterns with Strands
- LangChain and LangGraph
- LLM Memory Mechanics
- RAG, OpenSearch and LiteLLM
- Amazon Bedrock AgentCore
- A2A and A2UI: Agent Interoperability
- Agentic QA and Evaluation
- End-to-End Production Pipeline
- Agentic Product Lifecycle
Learning paths · Field guide
Study Plans
Eight sessions
Living notes
Error Index
Community Answers
Field Notes
Model & Region Notes
Cost Log
Scoreboard 🧪
The project
Roadmap
Editing this wiki
Maintainer Runbook
📘 The manual · live
🛫 Ninety Days, the simulator
🧰 The workbench
👔 For leadership
🧠 Mental models
Templates · Prompts
Frameworks & acronyms
The repository · Setup
Pinned discussions
Discussion map — where to post what
Exercise & lab index
Simulator Arena — get a lab graded
Pitch an idea
All discussions →