AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2025-10-19 · Documentation low

File: bedrock-agentcore/latest/devguide/built-in-tools-troubleshooting.md

Summary

Added multiple troubleshooting sections covering permissions, model access, session timeouts, S3 recordings, and Playwright connectivity

Security assessment

The changes provide guidance on proper IAM permissions, role trust policies, and S3 access controls which are security best practices, but there's no evidence of addressing a specific security vulnerability. The documentation adds security-related configuration guidance but doesn't reference any patched vulnerabilities.

Diff

diff --git a/bedrock-agentcore/latest/devguide/built-in-tools-troubleshooting.md b/bedrock-agentcore/latest/devguide/built-in-tools-troubleshooting.md
index 59366d42a..10afecc5e 100644
--- a//bedrock-agentcore/latest/devguide/built-in-tools-troubleshooting.md
+++ b//bedrock-agentcore/latest/devguide/built-in-tools-troubleshooting.md
@@ -12,0 +13,87 @@ This section provides solutions to common issues you might encounter when using
+### Permission denied errors
+
+**Symptom:** Errors mentioning access denied or insufficient permissions.
+
+**Solution:**
+
+  * Verify your IAM user or role has the required Browser permissions
+
+  * Check your AWS credentials: `aws sts get-caller-identity`
+
+  * For recording: Verify the execution role has Amazon S3 write permissions
+
+  * For recording: Confirm the trust policy allows `bedrock-agentcore.amazonaws.com` to assume the role
+
+
+
+
+### Model access denied
+
+**Symptom:** Errors about model access or authorization when running agents.
+
+**Solution:**
+
+  * Navigate to the Amazon Bedrock console
+
+  * Go to **Model access** in the left navigation
+
+  * Enable **Anthropic Claude Sonnet 4**
+
+  * Verify you're in the correct region (match the region in your code)
+
+
+
+
+### Browser session timeout
+
+**Symptom:** Browser sessions end unexpectedly or timeout errors occur.
+
+**Solution:**
+
+  * Check the `sessionTimeoutSeconds` parameter when starting sessions
+
+  * Default timeout is 900 seconds (15 minutes)
+
+  * Increase timeout for longer sessions: `sessionTimeoutSeconds=1800`
+
+  * Sessions automatically stop after the timeout period
+
+
+
+
+### Recording not appearing in Amazon S3
+
+**Symptom:** No recording files in your Amazon S3 bucket after session completes.
+
+**Solution:**
+
+  * Verify the execution role has correct Amazon S3 permissions
+
+  * Confirm the Amazon S3 bucket name and prefix are correct
+
+  * Check the execution role trust policy includes bedrock-agentcore service
+
+  * Review CloudWatch Logs for Amazon S3 upload errors
+
+  * Ensure the session ran for at least a few seconds (very short sessions may not generate recordings)
+
+
+
+
+### Playwright connection errors
+
+**Symptom:** Cannot connect to browser with Playwright or WebSocket errors.
+
+**Solution:**
+
+  * Verify you installed playwright: `pip install playwright`
+
+  * Confirm the browser session started successfully before connecting
+
+  * Check that the session is still active (not timed out)
+
+  * Verify your network allows WebSocket connections
+
+
+
+
@@ -90 +177 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Find your resources
+Session replay programmatic examples