AWS bedrock-agentcore documentation change
Summary
Removed detailed session replay implementation documentation and consolidated content into topic links for metrics and session replay
Security assessment
The changes restructure documentation by removing implementation details (including IAM policies and recording configurations) and replacing them with topic links. While the removed content included security-related IAM policies, this is a documentation reorganization rather than addressing a specific security issue or adding new security guidance.
Diff
diff --git a/bedrock-agentcore/latest/devguide/browser-observability.md b/bedrock-agentcore/latest/devguide/browser-observability.md index 94828cd4f..63fc41c91 100644 --- a//bedrock-agentcore/latest/devguide/browser-observability.md +++ b//bedrock-agentcore/latest/devguide/browser-observability.md @@ -5,2 +4,0 @@ -Session replayCloudWatch Metrics - @@ -23,162 +21 @@ You can view browser session metrics in Amazon CloudWatch, including session cou -## Session replay - -For session replay to work, you'll first need to create a Browser with recording enabled and provide the S3 bucket and prefix where you want the recording to be stored. Note that session replay is not available in the AWS managed Browser (aws.browser.v1). - -###### Note - -Session replay in Amazon Bedrock AgentCore captures DOM mutations within your browser session and replays those changes by reconstructing the DOM. During replay, the browser may make cross-origin HTTP requests to fetch external assets such as JavaScript files, CSS stylesheets, images, and other resources required to render the page accurately. - -Boto3 - - - - ## Request - response = cp_client.create_browser( - name="my_custom_browser", - description="Test browser for development", - networkConfiguration={ - "networkMode": "PUBLIC" - }, - executionRoleArn="arn:aws:iam::123456789012:role/Sessionreplay", - clientToken=str(uuid.uuid4()), - recording={ - "enabled": True, - "s3Location": { - "bucket": "session-record-123456789012", - "prefix": "replay-data" - } - } - ) - -API - - - - awscurl \ - --region <Region> \ - --service bedrock-agentcore \ - --request PUT \ - --header "Content-Type: application/json" \ - --data '{ - "name": "dsi_browser_2", - "description": "Test sandbox for development", - "networkConfiguration": { - "networkMode": "PUBLIC" - }, - "clientToken": "a1b2c3d4e5f6g7h8i9j0k1l2m3n4o5p6q7r8s9t0u1v2w3x4y5z" - }' \ - https://bedrock-agentcore.<Region>.amazonaws.com/browsers - ) - -### Permissions - -The executionRoleArn will be used to write the recording data to your given s3 bucket. The IAM role should have the below permissions: - - - { - "Sid": "BedrockAgentCoreBuiltInToolsS3Policy", - "Effect": "Allow", - "Action": [ - "s3:PutObject", - "s3:ListMultipartUploadParts", - "s3:AbortMultipartUpload" - ], - "Resource": "arn:aws:s3:::example-s3-bucket/example-prefix/*", - "Condition": { - "StringEquals": { - "aws:ResourceAccount": "{{accountId}}" - } - } - } - -Following is the trust policy for the role ARN. - -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [{ - "Sid": "BedrockAgentCoreBuiltInTools", - "Effect": "Allow", - "Principal": { - "Service": "bedrock-agentcore.amazonaws.com" - }, - "Action": "sts:AssumeRole", - "Condition": { - "StringEquals": { - "aws:SourceAccount": "111122223333" - }, - "ArnLike": { - "aws:SourceArn": "arn:aws:bedrock-agentcore:us-east-1:111122223333:*" - } - } - }] - } - - -Once you starts a browser session and interact with the browser either via automation end point or via live view, the session recording will start getting generated and pushed to your provided s3 in chunks. - -### Standalone Session Replay Viewer - -A separate tool for viewing recorded browser sessions directly from S3 without creating a new browser. - - * Connect directly to S3 to view recordings - - * View any past recording by specifying its session ID - - * Automatically finds the latest recording if no session ID is provided - - - - - - # View the latest recording in a bucket - python view_recordings.py --bucket session-record-test-123456789012 --prefix replay-data - - # View a specific recording - python view_recordings.py --bucket session-record-test-123456789012 --prefix replay-data --session 01JZVDG02M8MXZY2N7P3PKDQ74 - - # Use a specific AWS profile - python view_recordings.py --bucket session-record-test-123456789012 --prefix replay-data --profile my-profile - - -For reference, see [Standalone session replay viewer on GitHub](https://github.com/awslabs/amazon-bedrock-agentcore-samples/blob/main/01-tutorials/05-AgentCore-tools/02-Agent-Core-browser-tool/interactive_tools/live_view_sessionreplay/view_recordings.py). - -### Complete Browser Experience with Recording and Replay - -A separate tool for viewing recorded browser sessions directly from S3 without creating a new browser. - - * Create browser sessions with automatic recording to S3 - - * Live view with interactive control (take/release) - - * Adjust display resolution on the fly - - * Automatic session recording to S3 - - * Integrated session replay viewer for watching recordings - - - - - - # View the latest recording in a bucket - python -m live_view_sessionreplay.browser_interactive_session - - -For reference, see [Interactive browser session on GitHub](https://github.com/awslabs/amazon-bedrock-agentcore-samples/blob/main/01-tutorials/05-AgentCore-tools/02-Agent-Core-browser-tool/interactive_tools/live_view_sessionreplay/browser_interactive_session.py). - -## CloudWatch Metrics - -You can view the following metrics in Amazon CloudWatch: - - * Session counts: The number of browser sessions that have been requested - - * Session duration: The length of time browser sessions are active - - * Error rates: The frequency of errors encountered during browser sessions +###### Topics @@ -186 +23 @@ You can view the following metrics in Amazon CloudWatch: - * Resource utilization: CPU, memory, and network usage by browser sessions + * [CloudWatch Metrics for AgentCore Browser](./browser-metrics.html) @@ -187,0 +25 @@ You can view the following metrics in Amazon CloudWatch: + * [Browser session recording and replay](./browser-session-replay.html) @@ -191 +28,0 @@ You can view the following metrics in Amazon CloudWatch: -These metrics can be used to monitor the usage and performance of your browser sessions, set up alarms for abnormal behavior, and optimize your resource allocation. @@ -201 +38 @@ Rendering live view using DCV client -Troubleshoot built-in tools +CloudWatch Metrics for AgentCore Browser