AWS bedrock-agentcore documentation change
Summary
Restructured documentation sections, added details about MCP protocol support including session isolation and Mcp-Session-Id header handling
Security assessment
Added documentation explains session isolation and automatic Mcp-Session-Id header usage, which are security-adjacent features for session management. However, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/bedrock-agentcore/latest/devguide/runtime-mcp.md b/bedrock-agentcore/latest/devguide/runtime-mcp.md index 54b069c64..2da469951 100644 --- a//bedrock-agentcore/latest/devguide/runtime-mcp.md +++ b//bedrock-agentcore/latest/devguide/runtime-mcp.md @@ -5 +5 @@ -PrerequisitesCreate your MCP serverTest your MCP server locallyDeploy your MCP server to AWSInvoke your deployed MCP serverHow Amazon Bedrock AgentCore supports MCPNext stepsAppendix +How Amazon Bedrock AgentCore supports MCPPrerequisitesStep 1: Create your MCP serverStep 2: Test your MCP server locallyStep 3: Deploy your MCP server to AWSStep 4: Invoke your deployed MCP serverAppendix @@ -29,0 +30,2 @@ In this section, you learn: + * How Amazon Bedrock AgentCore supports MCP + @@ -32 +34 @@ In this section, you learn: - * Create your MCP server + * Step 1: Create your MCP server @@ -34 +36 @@ In this section, you learn: - * Test your MCP server locally + * Step 2: Test your MCP server locally @@ -36 +38 @@ In this section, you learn: - * Deploy your MCP server to AWS + * Step 3: Deploy your MCP server to AWS @@ -38 +40 @@ In this section, you learn: - * Invoke your deployed MCP server + * Step 4: Invoke your deployed MCP server @@ -40 +42 @@ In this section, you learn: - * How Amazon Bedrock AgentCore supports MCP + * Appendix @@ -42 +43,0 @@ In this section, you learn: - * Next steps @@ -44 +44,0 @@ In this section, you learn: - * Appendix @@ -46,0 +47 @@ In this section, you learn: +## How Amazon Bedrock AgentCore supports MCP @@ -47,0 +49,5 @@ In this section, you learn: +When you configure a Amazon Bedrock AgentCore Runtime with the MCP protocol, the service expects MCP server containers to be available at the path `0.0.0.0:8000/mcp`, which is the default path supported by most official MCP server SDKs. + +Amazon Bedrock AgentCore requires stateless streamable-HTTP servers because the Runtime provides session isolation by default. The platform automatically adds a `Mcp-Session-Id` header for any request without it, so MCP clients can maintain connection continuity to the same Amazon Bedrock AgentCore Runtime session. + +The payload of the `InvokeAgentRuntime` API is passed through directly, allowing RPC messages of protocols like MCP to be easily proxied. @@ -58 +64 @@ In this section, you learn: -## Create your MCP server +## Step 1: Create your MCP server @@ -108 +114 @@ Create a new file called `my_mcp_server.py`: -## Test your MCP server locally +## Step 2: Test your MCP server locally @@ -149 +155 @@ You can also test your server using the MCP Inspector as described in Local test -## Deploy your MCP server to AWS +## Step 3: Deploy your MCP server to AWS @@ -224 +230 @@ After deployment, you'll receive an agent runtime ARN that looks like: -## Invoke your deployed MCP server +## Step 4: Invoke your deployed MCP server @@ -275,12 +280,0 @@ You can also test your deployed server using the MCP Inspector as described in R -## How Amazon Bedrock AgentCore supports MCP - -When you configure a Amazon Bedrock AgentCore Runtime with the MCP protocol, the service expects MCP server containers to be available at the path `0.0.0.0:8000/mcp`, which is the default path supported by most official MCP server SDKs. - -Amazon Bedrock AgentCore requires stateless streamable-HTTP servers because the Runtime provides session isolation by default. The platform automatically adds a `Mcp-Session-Id` header for any request without it, so MCP clients can maintain connection continuity to the same Amazon Bedrock AgentCore Runtime session. - -The payload of the `InvokeAgentRuntime` API is passed through directly, allowing RPC messages of protocols like MCP to be easily proxied. - -## Next steps - -To learn more about creating custom servers and Docker containers for Amazon Bedrock AgentCore, explore the documentation on deploying agents using custom servers and Docker. - @@ -425 +419 @@ Use any foundation model -Use isolated sessions for agents +Deploy A2A servers