AWS bedrock-agentcore documentation change
Summary
Updated service quota terminology, added Browser/Code Interpreter service quotas, and expanded Gateway Service quota details
Security assessment
Changes focus on operational quotas and service capacity limits rather than security controls. While new Browser/Code Interpreter sections mention session durations and configurations, these are operational parameters without explicit security context or vulnerability mitigation documentation.
Diff
diff --git a/bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md b/bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md index 914becc9a..edc062289 100644 --- a//bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md +++ b//bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md @@ -5 +5 @@ -AgentCore Runtime service limitsAgentCore Memory service limitsAgentCore Identity service limitsAgentCore Gateway Service limits +AgentCore Runtime Service QuotasAgentCore Memory Service QuotasAgentCore Identity Service QuotasAgentCore Gateway Service QuotasAgentCore Browser Service QuotasAgentCore Code Interpreter Service Quotas @@ -19 +19 @@ To request a quota increase, contact AWS support. - * AgentCore Runtime service limits + * AgentCore Runtime Service Quotas @@ -21 +21 @@ To request a quota increase, contact AWS support. - * AgentCore Memory service limits + * AgentCore Memory Service Quotas @@ -23 +23 @@ To request a quota increase, contact AWS support. - * AgentCore Identity service limits + * AgentCore Identity Service Quotas @@ -25 +25 @@ To request a quota increase, contact AWS support. - * AgentCore Gateway Service limits + * AgentCore Gateway Service Quotas @@ -26,0 +27 @@ To request a quota increase, contact AWS support. + * AgentCore Browser Service Quotas @@ -27,0 +29 @@ To request a quota increase, contact AWS support. + * AgentCore Code Interpreter Service Quotas @@ -30 +32,3 @@ To request a quota increase, contact AWS support. -## AgentCore Runtime service limits + + +## AgentCore Runtime Service Quotas @@ -67 +71 @@ Max Session Duration | 8 hrs | No | -## AgentCore Memory service limits +## AgentCore Memory Service Quotas @@ -84 +88 @@ Max TPS for all other AgentCore Memory APIs | 20 -## AgentCore Identity service limits +## AgentCore Identity Service Quotas @@ -93 +97 @@ OAuth client credentials stored per AWS account per AWS Region | 50 | Yes | Can -## AgentCore Gateway Service limits +## AgentCore Gateway Service Quotas @@ -131,10 +135,22 @@ Amazon Bedrock AgentCore Gateway has the following service quotas. You can reque -Amazon Bedrock AgentCore Gateway service quotas Quota | Default value | Adjustable ----|---|--- -Maximum number of gateways per account | 50 | Yes -Maximum number of targets per gateway | 50 | Yes -Maximum number of tools per target | 100 | Yes -Maximum size of tool schema (KB) | 1,024 | No -Maximum number of concurrent requests per gateway | 100 | Yes -Maximum request size (MB) | 6 | No -Maximum response size (MB) | 6 | No -Maximum request timeout (seconds) | 120 | No +Amazon Bedrock AgentCore Gateway service quotas Quota | Default value | Adjustable | Notes +---|---|---|--- +Number of gateways per account | 100 | Yes | +Number of targets per gateway | 10 | Yes | +Number of tools per target | 200 | Yes | +Timeout for a gateway invocation | 55 seconds | Yes | Aligns with Lambda function timeout +Maximum inline schema size | 1 MB | Yes | +Maximum S3 payload schema size | 2 MB | Yes | +Tool name character limit | 256 characters | Yes | +CreateGateway API rate | 5 TPM | Yes | Transactions per minute +UpdateGateway API rate | 5 TPM | Yes | Transactions per minute +GetGateway API rate | 5 TPS | Yes | Transactions per second +ListGateways API rate | 5 TPS | Yes | Transactions per second +DeleteGateway API rate | 5 TPM | Yes | Transactions per minute +CreateGatewayTarget API rate | 5 TPM | Yes | Transactions per minute +UpdateGatewayTarget API rate | 5 TPM | Yes | Transactions per minute +GetGatewayTarget API rate | 5 TPS | Yes | Transactions per second +ListGatewayTargets API rate | 5 TPS | Yes | Transactions per second +DeleteGatewayTarget API rate | 5 TPM | Yes | Transactions per minute +CallTool/ListTool/SearchTool API rate at gateway level | 5 TPS | Yes | Transactions per second +CallTool/ListTool/SearchTool API rate at account level | 5 TPS | Yes | Transactions per second +Maximum CallTool/ListTool/SearchTool payload size | 6 MB | Yes | @@ -143,0 +160,21 @@ For more information about service quotas and how to request increases, see [Req +## AgentCore Browser Service Quotas + +The Browser tool has the following service quotas and considerations that apply to your account. + +Browser service quotas Quota | Default Value | Adjustable | Notes +---|---|---|--- +Session duration | 15 minutes | Yes | Can be extended up to 8 hours +Concurrent active sessions per account | 500 | Yes | Can be increased via support ticket +Total Browser tool configurations per account | 100 | Yes | Can be increased via support ticket +CDP stream and live view stream per session | 1 each | No | Allows a single agent and end user to interact with the browser + +## AgentCore Code Interpreter Service Quotas + +The Code Interpreter tool has the following service quotas and considerations that apply to your account. + +Code Interpreter service quotas Quota | Default Value | Adjustable | Notes +---|---|---|--- +Execution time | 15 minutes | Yes | Can be extended up to 8 hours +Concurrent active sessions per account | 500 | Yes | Can be increased via support ticket +Total Code Interpreter tool configurations per account | 100 | Yes | Can be increased via support ticket +