AWS bedrock-agentcore documentation change
Summary
Added troubleshooting section for MMDSv2-related ValidationException errors with resolution steps
Security assessment
Change documents error resolution for security feature (MMDSv2) configuration. Provides remediation without indicating active security incidents.
Diff
diff --git a/bedrock-agentcore/latest/devguide/runtime-troubleshooting.md b/bedrock-agentcore/latest/devguide/runtime-troubleshooting.md index 74d38a469..0ca4358f2 100644 --- a//bedrock-agentcore/latest/devguide/runtime-troubleshooting.md +++ b//bedrock-agentcore/latest/devguide/runtime-troubleshooting.md @@ -7 +7 @@ -My agent invocations fail with 504 Gateway Timeout errorsMy Docker build fails with "403 Forbidden" when pulling Python base imagesI get "Unknown service: 'bedrock-agent-core-runtime'" error when using boto3I get "AccessDeniedException" when trying to create an Amazon Bedrock AgentCore RuntimeMy Docker build fails with "exec /bin/sh: exec format error"What are the requirements for Docker containers used with Amazon Bedrock AgentCore Runtime?My long-running tool gets interrupted after 15 minutesMy idle sessions are not being released and I am exhausting my session quotaHow do I access the runtimeSessionId in my agent code for tagging or grouping resources?I have RuntimeClientError (403) issuesI have missing or empty CloudWatch LogsI have payload format issuesI need help understanding HTTP error codesI need recommendations for testing my agentI need help debugging container issuesI need help troubleshooting MCP protocol agentsI need help troubleshooting bidirectional streaming using WebSocketMy code changes aren’t reflected in existing sessionsSpans are missing when my runtime is invoked from a Lambda functionMy S3 Files or EFS mount fails with "Access denied"My S3 Files or EFS mount fails with "ResourceNotFound"My S3 Files or EFS mount times outI get "Permission Denied" when writing to my mounted filesystemMy container fails to start with HTTP 424 error on high-layer imagesBest practices +My agent invocations fail with "This runtime is not MMDSv2-enabled" ValidationExceptionMy agent invocations fail with 504 Gateway Timeout errorsMy Docker build fails with "403 Forbidden" when pulling Python base imagesI get "Unknown service: 'bedrock-agent-core-runtime'" error when using boto3I get "AccessDeniedException" when trying to create an Amazon Bedrock AgentCore RuntimeMy Docker build fails with "exec /bin/sh: exec format error"What are the requirements for Docker containers used with Amazon Bedrock AgentCore Runtime?My long-running tool gets interrupted after 15 minutesMy idle sessions are not being released and I am exhausting my session quotaHow do I access the runtimeSessionId in my agent code for tagging or grouping resources?I have RuntimeClientError (403) issuesI have missing or empty CloudWatch LogsI have payload format issuesI need help understanding HTTP error codesI need recommendations for testing my agentI need help debugging container issuesI need help troubleshooting MCP protocol agentsI need help troubleshooting bidirectional streaming using WebSocketMy code changes aren’t reflected in existing sessionsSpans are missing when my runtime is invoked from a Lambda functionMy S3 Files or EFS mount fails with "Access denied"My S3 Files or EFS mount fails with "ResourceNotFound"My S3 Files or EFS mount times outI get "Permission Denied" when writing to my mounted filesystemMy container fails to start with HTTP 424 error on high-layer imagesBest practices @@ -14,0 +15,2 @@ This troubleshooting topic helps you identify and resolve common issues when wor + * My agent invocations fail with "This runtime is not MMDSv2-enabled" ValidationException + @@ -67,0 +70,28 @@ This troubleshooting topic helps you identify and resolve common issues when wor +## My agent invocations fail with "This runtime is not MMDSv2-enabled" ValidationException + +**When this occurs:** When invoking an agent runtime via `InvokeAgentRuntime`, `ExecuteCommand`, `InvokeAgentRuntimeWithWebSocketStream`, `InvokeAgentRuntimeCommandShell`, or `GetAgentCard` + +**Why this happens:** Starting June 30, 2026, Amazon Bedrock AgentCore Runtime requires all agent runtimes to use MMDSv2 (MicroVM Metadata Service Version 2). The service rejects invocations targeting runtimes without `metadataConfiguration` set, or with `requireMMDSV2` set to `false` or `null`. + +**Solution:** Call [UpdateAgentRuntime](https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntime.html) with `requireMMDSV2` set to `true` in `metadataConfiguration`: + + + import boto3 + + client = boto3.client('bedrock-agentcore-control', region_name='us-west-2') + + try: + client.update_agent_runtime( + agentRuntimeId='your-agent-runtime-id', + metadataConfiguration={ + 'requireMMDSV2': True + } + ) + print("MMDSv2 enabled successfully.") + except client.exceptions.ResourceNotFoundException as e: + print(f"Runtime not found: {e}") + except Exception as e: + print(f"Error enabling MMDSv2: {e}") + +After you update, new invocations will succeed. Existing sessions are not affected. +