Amazon Bedrock AgentCore launches as a managed service for building multi-tenant agentic applications with built-in identity management, memory, observability, and evaluations.

Amazon Bedrock AgentCore is a managed, serverless service for building, deploying and securely operating agentic applications on AWS, designed to address architectural challenges of multi-tenant SaaS deployments including tenant isolation, tenant identity, tenant observability, data isolation, cost attribution, and noisy neighbor mitigation.

AgentCore Runtime uses session-isolated microVM-based compute (lightweight virtual machines launched per session without full VM overhead) where each session carries its own persistent file system, and tenant context flows through custom HTTP headers carrying tenant-specific metadata such as identifier, tier, regional preferences, feature flags, or entitlements.

The service supports three tenant isolation patterns—Silo (dedicated tenant-specific infrastructure), Pool (shared resources with metadata-based filtering), and Bridge (common workflow steps in shared skills invoking tenant-specific skills at runtime)—across agent runtime deployment, model selection, workflows, retrieval systems, and identity management.