AWS Security ChangesHomeSearch

AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2026-03-13 · Documentation low

File: bedrock-agentcore/latest/devguide/runtime-service-contract.md

Summary

Added AGUI (Agent-to-User Interface) protocol documentation, updated protocol comparison table to include AGUI protocol details, and added AGUI to the protocol comparison list.

Security assessment

This change adds documentation for a new protocol (AGUI) and updates comparison tables. No security vulnerabilities are addressed. The change includes authentication information (SigV4, OAuth 2.0) for the new protocol, but this is standard feature documentation, not security-specific documentation.

Diff

diff --git a/bedrock-agentcore/latest/devguide/runtime-service-contract.md b/bedrock-agentcore/latest/devguide/runtime-service-contract.md
index 172c5d22c..81b57d744 100644
--- a//bedrock-agentcore/latest/devguide/runtime-service-contract.md
+++ b//bedrock-agentcore/latest/devguide/runtime-service-contract.md
@@ -20,0 +21,2 @@ The AgentCore Runtime service contract supports the following communication prot
+  * [AGUI](./runtime-agui-protocol-contract.html): Agent-to-User Interface protocol for interactive agent experiences with UI rendering
+
@@ -26 +28 @@ The AgentCore Runtime service contract supports the following communication prot
-Compare the A2A, HTTP, and MCP protocols to understand the differences and use cases.
+Compare the HTTP, MCP, A2A, and AGUI protocols to understand the differences and use cases.
@@ -28,8 +30,8 @@ Compare the A2A, HTTP, and MCP protocols to understand the differences and use c
-Protocol Comparison Feature | HTTP Protocol | MCP Protocol | A2A Protocol  
----|---|---|---  
-**Port** | 8080 | 8000 | 9000  
-**Mount Path** | /invocations (HTTP), /ws (WebSocket) | /mcp | / (root)  
-**Message Format** | REST JSON/SSE, WebSocket (text/binary) | JSON-RPC | JSON-RPC 2.0  
-**Discovery** | N/A | Tool listing | Agent Cards  
-**Authentication** | SigV4, OAuth 2.0; WebSocket supports SigV4 by headers and query params | SigV4, OAuth 2.0 | SigV4, OAuth 2.0  
-**Use Case** | Direct API calls, real-time streaming | Tool servers | Agent-to-agent communication  
+Protocol Comparison Feature | HTTP Protocol | MCP Protocol | A2A Protocol | AGUI Protocol  
+---|---|---|---|---  
+**Port** | 8080 | 8000 | 9000 | 8080  
+**Mount Path** | /invocations (HTTP), /ws (WebSocket) | /mcp | / (root) | /invocations (SSE), /ws (WebSocket)  
+**Message Format** | REST JSON/SSE, WebSocket (text/binary) | JSON-RPC | JSON-RPC 2.0 | Event streams (SSE/WebSocket)  
+**Discovery** | N/A | Tool listing | Agent Cards | N/A  
+**Authentication** | SigV4, OAuth 2.0; WebSocket supports SigV4 by headers and query params | SigV4, OAuth 2.0 | SigV4, OAuth 2.0 | SigV4, OAuth 2.0  
+**Use Case** | Direct API calls, real-time streaming | Tool servers | Agent-to-agent communication | Interactive UI experiences  
@@ -44,0 +47,2 @@ Protocol Comparison Feature | HTTP Protocol | MCP Protocol | A2A Protocol
+  * [AGUI protocol contract](./runtime-agui-protocol-contract.html)
+