AWS bedrock-agentcore documentation change
Summary
Added documentation for AWS Agent Registry Service Quotas including resource limits (max registries per account) and throttling limits for various API operations (CreateRegistry, GetRegistry, UpdateRegistry, DeleteRegistry, ListRegistries, CreateRegistryRecord, GetRegistryRecord, UpdateRegistryRecord, DeleteRegistryRecord, ListRegistryRecords, SubmitRegistryRecordForApproval, UpdateRegistryRecordStatus, SearchRegistryRecords, InvokeRegistryMcp). Also added InvokeBrowser API rate limit and reformatted table headers for consistency.
Security assessment
The changes document service quotas and throttling limits for AWS Agent Registry and other AgentCore components. While throttling limits can help prevent denial-of-service scenarios, there is no evidence in the diff that these changes address a specific security vulnerability, weakness, or incident. The changes appear to be routine documentation updates for service limits and API rate limits.
Diff
diff --git a/bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md b/bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md index 933cb6c8d..85a8ce5ed 100644 --- a//bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md +++ b//bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md @@ -5 +5 @@ -AgentCore Runtime Service QuotasAgentCore Memory Service QuotasAgentCore Identity Service QuotasAgentCore Gateway Service QuotasAgentCore Browser Service QuotasAgentCore Code Interpreter Service QuotasAgentCore Evaluations Service QuotasAgentCore Resource Based Policies +AgentCore Runtime Service QuotasAgentCore Memory Service QuotasAgentCore Identity Service QuotasAgentCore Gateway Service QuotasAgentCore Browser Service QuotasAgentCore Code Interpreter Service QuotasAgentCore Evaluations Service QuotasAgentCore Resource Based PoliciesAWS Agent Registry Service Quotas @@ -30,0 +31,2 @@ To request a quota increase, contact AWS support. + * AWS Agent Registry Service Quotas + @@ -42 +44 @@ The following table describes the resource allocation limits for AgentCore Runti -Resource allocation limits Limit | Default Value | Adjustable | Notes +Limit | Default Value | Adjustable | Notes @@ -59 +61 @@ The following table describes the invocation limits for AgentCore Runtime. You c -Invocation limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -74 +76 @@ The following table describes the rate limits for AgentCore Runtime after which -Throttling limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -100 +102 @@ The following table describes the lifetime session lifecycle parameters for Agen -Lifetime session lifecycle parameters Phase | Timeout | Adjustable | Notes +Phase | Timeout | Adjustable | Notes @@ -109 +111 @@ The following table describes the limits for session storage: -Session storage limits Limit | Value | Adjustable | Description +Limit | Value | Adjustable | Description @@ -121 +123 @@ The following table describes the lifetime session lifecycle parameters for Agen -AgentCore Memory limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -152 +154 @@ When working with AgentCore Identity, you need to be aware of the service limits -AgentCore Identity Limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -196 +198 @@ Amazon Bedrock AgentCore Gateway has the following service quotas. You can reque -Amazon Bedrock AgentCore Gateway service quotas Quota | Default value | Adjustable +Quota | Default value | Adjustable @@ -227 +229 @@ The Browser tool has the following service quotas and considerations that apply -Browser service quotas Quota | Default Value | Adjustable | Notes +Quota | Default Value | Adjustable | Notes @@ -237 +239 @@ The following table describes the invocation limits for the Browser tool: -Browser invocation limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -248 +250 @@ The following table describes the limits for browser extensions: -Browser extensions limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -257 +259 @@ The following table describes the limits for browser profiles: -Browser profile limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -266 +268 @@ The following table describes the limits for browser proxies: -Browser proxy limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -278 +280 @@ The following table describes the rate limits for the Browser tool APIs after wh -Browser throttling limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -290,0 +293 @@ ConnectBrowserLiveViewStream API rate | 30 TPS | Yes | Transactions per second p +InvokeBrowser API rate | 5 TPS | Yes | Transactions per second per account @@ -301 +304 @@ The Code Interpreter tool has the following service quotas and considerations th -Code Interpreter service quotas Quota | Default Value | Adjustable | Notes +Quota | Default Value | Adjustable | Notes @@ -311 +314 @@ The following table describes the invocation limits for the Code Interpreter too -Code Interpreter invocation limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -322 +325 @@ The following table describes the rate limits for the Code Interpreter tool APIs -Code Interpreter throttling limits Limit | Value | Adjustable | Notes +Limit | Value | Adjustable | Notes @@ -338 +341 @@ The following table describes the service quotas for AgentCore Evaluations: -AgentCore Evaluations service quotas Limit | Default Value | Adjustable | Note +Limit | Default Value | Adjustable | Note @@ -340,10 +343,7 @@ AgentCore Evaluations service quotas Limit | Default Value | Adjustable | Note -Input tokens per minute for built-in evaluators | 200,000 | No -Evaluations per minute for built-in evaluators | 100 | No -Spans per on-demand evaluation | 1000 | No -On-demand evaluation payload size (in MB) | 15 | No -Evaluators per on-demand evaluation | 1 | No -Input tokens per evaluation | 200,000 | No -Spans evaluated per sampled session | 1000 | No -Size of all spans in a sampled session (in MB) | 15 | No -Active online evaluation configurations per account | 100 | No -Evaluators per online evaluation configuration | 10 | No +Input tokens per minute for built-in evaluators | 200,000 | No | Evaluations per minute for built-in evaluators +100 | No | Spans per on-demand evaluation | 1000 +No | On-demand evaluation payload size (in MB) | 15 | No +Evaluators per on-demand evaluation | 1 | No | Input tokens per evaluation +200,000 | No | Spans evaluated per sampled session | 1000 +No | Size of all spans in a sampled session (in MB) | 15 | No +Active online evaluation configurations per account | 100 | No | Evaluators per online evaluation configuration @@ -355 +355 @@ The following table describes the quotas for resource-based policies: -Resource-based policies quotas Quota | Default value | Adjustable +Quota | Default value | Adjustable @@ -359,0 +360,29 @@ Maximum statements per policy | 100 | No +## AWS Agent Registry Service Quotas + +### Resource limits + +Quota | Default value | Adjustable | Notes +---|---|---|--- +Maximum registries per account per Region | 5 | Yes | + +### Throttling limits + +The following table describes the rate limits for AgentCore Registry APIs after which you will be throttled. You can request increases for some quotas using the Service Quotas console. + +Limit | Value | Adjustable | Notes +---|---|---|--- +CreateRegistry API rate | 5 TPS | Yes | Transactions per second per account +GetRegistry API rate | 5 TPS | Yes | Transactions per second per account +UpdateRegistry API rate | 5 TPS | Yes | Transactions per second per account +DeleteRegistry API rate | 5 TPS | Yes | Transactions per second per account +ListRegistries API rate | 5 TPS | Yes | Transactions per second per account +CreateRegistryRecord API rate | 5 TPS | Yes | Transactions per second per account +GetRegistryRecord API rate | 10 TPS | Yes | Transactions per second per account +UpdateRegistryRecord API rate | 5 TPS | Yes | Transactions per second per account +DeleteRegistryRecord API rate | 10 TPS | Yes | Transactions per second per account +ListRegistryRecords API rate | 10 TPS | Yes | Transactions per second per account +SubmitRegistryRecordForApproval API rate | 10 TPS | Yes | Transactions per second per account +UpdateRegistryRecordStatus API rate | 10 TPS | Yes | Transactions per second per account +SearchRegistryRecords API rate | 50 TPS | Yes | Transactions per second per account +InvokeRegistryMcp API rate | 50 TPS | Yes | Transactions per second per account +