AWS Security ChangesHomeSearch

AWS bedrock-agentcore medium security documentation change

Service: bedrock-agentcore · 2026-02-25 · Security-related medium

File: bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md

Summary

Added documentation for Browser and Code Interpreter throttling limits including API rate limits for various operations

Security assessment

Documenting API rate limits helps prevent denial-of-service (DoS) attacks and abuse by defining explicit throttling thresholds. This is a security control mechanism that protects service availability.

Diff

diff --git a/bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md b/bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md
index 67b0123ff..0b8d9774d 100644
--- a//bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md
+++ b//bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md
@@ -255,0 +256,23 @@ Domain pattern length | 253 characters | No | Standard DNS limit
+### Browser Throttling Limits
+
+The following table describes the rate limits for the Browser tool APIs after which you will be throttled:
+
+Browser throttling limits Limit | Value | Adjustable | Notes  
+---|---|---|---  
+CreateBrowser API rate | 5 TPS | Yes | Transactions per second per account  
+GetBrowser API rate | 30 TPS | Yes | Transactions per second per account  
+ListBrowsers API rate | 30 TPS | Yes | Transactions per second per account  
+DeleteBrowser API rate | 5 TPS | Yes | Transactions per second per account  
+StartBrowserSession API rate | 30 TPS | Yes | Transactions per second per account  
+GetBrowserSession API rate | 30 TPS | Yes | Transactions per second per account  
+ListBrowserSessions API rate | 30 TPS | Yes | Transactions per second per account  
+StopBrowserSession API rate | 30 TPS | Yes | Transactions per second per account  
+UpdateBrowserStream API rate | 30 TPS | Yes | Transactions per second per account  
+ConnectBrowserAutomationStream API rate | 30 TPS | Yes | Transactions per second per account  
+ConnectBrowserLiveViewStream API rate | 30 TPS | Yes | Transactions per second per account  
+SaveBrowserSessionProfile API rate | 10 TPS | Yes | Transactions per second per account  
+CreateBrowserProfile API rate | 5 TPS | Yes | Transactions per second per account  
+GetBrowserProfile API rate | 30 TPS | Yes | Transactions per second per account  
+ListBrowserProfiles API rate | 30 TPS | Yes | Transactions per second per account  
+DeleteBrowserProfile API rate | 5 TPS | Yes | Transactions per second per account  
+  
@@ -277,0 +301,16 @@ Disk size | 10 GB | No | Maximum disk space available per session
+### Code Interpreter Throttling Limits
+
+The following table describes the rate limits for the Code Interpreter tool APIs after which you will be throttled:
+
+Code Interpreter throttling limits Limit | Value | Adjustable | Notes  
+---|---|---|---  
+CreateCodeInterpreter API rate | 5 TPS | Yes | Transactions per second per account  
+GetCodeInterpreter API rate | 30 TPS | Yes | Transactions per second per account  
+ListCodeInterpreters API rate | 30 TPS | Yes | Transactions per second per account  
+DeleteCodeInterpreter API rate | 5 TPS | Yes | Transactions per second per account  
+StartCodeInterpreterSession API rate | 30 TPS | Yes | Transactions per second per account  
+GetCodeInterpreterSession API rate | 30 TPS | Yes | Transactions per second per account  
+ListCodeInterpreterSessions API rate | 30 TPS | Yes | Transactions per second per account  
+StopCodeInterpreterSession API rate | 30 TPS | Yes | Transactions per second per account  
+InvokeCodeInterpreter API rate | 30 TPS | Yes | Transactions per second per account  
+