AIATS Insights · Topic
AWS architecture, Bedrock AgentCore, serverless and security playbooks for UK teams.
AWS's 21 Sep 2026 pattern turns Bedrock Guardrails interventions into OCSF Detection Findings in the CloudWatch unified data store. A UK SOC/SRE gate: transform locally, centralize sanitized findings, correlate with CloudTrail and VPC Flow Logs — without shipping prompt bodies.
AgentCore Runtime V2 GA (18 Sep 2026) reclaims session memory and holds P75 cold starts near 2s from 200 MB–2 GB images, including eu-west-1. A UK SRE canary and CAB checklist before flipping platformVersion to V2.
AgentCore optimization (17 Jun 2026) turns production traces into failure, intent, and trajectory insights with recommendations, batch evals, and A/B tests. A UK SRE CAB gate for silent agent failures.
AgentCore Gateway HTTP passthrough targets forward HTTPS traffic without protocol translation — ideal for fronting B2B APIs, A2A agents and external MCP. UK production gate: contrast with MCP and Runtime targets, auth, schema and path routing.
On 8 Sep 2026 AWS let API Gateway REST APIs present an ACM (or Private CA) client certificate to backends for mutual TLS — replacing the old self-signed outbound cert. UK zero-trust playbook for FS/healthcare PKI, stage config and CAB evidence.
AgentCore Gateway Runtime targets are GA: path-routed passthrough to Runtime agents with policy, Guardrails, buffered interceptors and hard bypass locks (SigV4 SourceArn or JWT workload allowlist). UK gate before you expose the runtime ARN.
AWS MCP Server (4 Sep 2026) lets coding agents diagnose Lambda plus API Gateway, EventBridge, S3, DynamoDB, SNS, SQS and Step Functions — with 7-day baselines and fewer tokens. UK playbook: eu-central-1 MCP preference, IAM least privilege, PII in logs and SRE runbook gates.
From 9 Sep 2026, Lambda Managed Instances support up to 90-minute async/ESM timeouts (6x prior 15-minute limit). UK playbook: eu-west-1/2, clean stop, idempotency and when to keep sync at 15 minutes.
Agent Registry GA moved to the agent-registry namespace; bedrock-agentcore registry APIs shut on 17 Sep 2026. UK SRE cutover: endpoints, IAM, schema, migration tooling — with ~2 days left.
AgentCore Policy is GA (Mar 2026) with Cedar at the Gateway and Dogwood temporal rules for session trajectory. UK playbook: LOG_ONLY → ENFORCE, session IDs and high-risk tool gates.
Sep 8 2026: AgentCore Memory IngestData extracts long-term memory without creating a short-term event. UK playbook for payloads, verify/redrive and GDPR minimisation.
OpenAI GPT-6 Astra is GA on Amazon Bedrock with 1M context and computer/browser use. Use this UK checklist — IAM, Guardrails, evals and allow-lists — before you promote it under AgentCore.