AWS Security ChangesHomeSearch

AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2026-01-31 · Documentation low

File: bedrock-agentcore/latest/devguide/agentcore-vpc.md

Summary

Added operational note about Elastic Network Interfaces (ENIs) persistence behavior when deleting agents

Security assessment

The note explains ENI resource management behavior (persisting up to 8 hours after agent deletion) but doesn't address vulnerabilities, security features, or threats. While ENI management is infrastructure-related, there's no evidence of security issues or new security documentation.

Diff

diff --git a/bedrock-agentcore/latest/devguide/agentcore-vpc.md b/bedrock-agentcore/latest/devguide/agentcore-vpc.md
index 5647a05d0..e70cc34a2 100644
--- a//bedrock-agentcore/latest/devguide/agentcore-vpc.md
+++ b//bedrock-agentcore/latest/devguide/agentcore-vpc.md
@@ -36,0 +37,4 @@ When you configure VPC connectivity for Amazon Bedrock AgentCore Runtime and too
+###### Note
+
+ENIs are shared resources across agents that use the same subnet and security group configuration. When you delete an agent, the associated ENI may persist in your VPC for up to 8 hours before it is automatically removed.
+