ADR: Adopting Amazon Bedrock AgentCore in Production

Short summary

After evaluating LangChain, Bedrock, AgentCore, and Step Functions, Bedrock AgentCore emerged as optimal for regulated financial environments: it provides managed session memory with TTL, declarative guardrails, and OAuth2/OIDC-based tool authorization that eliminate custom compliance infrastructure. The decision consciously accepted AWS platform lock-in for the agent runtime. Tool implementations remain completely portable, mitigating future migration risk.

• •Evaluated four approaches (LangChain, Bedrock, AgentCore, Step Functions) against five critical forces: state management, regulatory traceability, guardrails, cost control, and runtime portability
• •AgentCore delivers managed session memory, PII filtering, per-tool OAuth2/OIDC authorization, and native CloudTrail/X-Ray traceability without custom infrastructure
• •Trade-off: AWS lock-in for agent layer offset by tool portability and elimination of security debt in authorization/audit trail management

Generated with AI, which can make mistakes.