AWS bedrock-agentcore documentation change
Summary
Added 'Use with a harness' section explaining how to attach Web Search Tool gateway to AgentCore harness with required bedrock-agentcore:InvokeGateway permission
Security assessment
Documents integration patterns without addressing security vulnerabilities. The permission requirement is standard IAM configuration, not a new security feature or vulnerability fix. No evidence of security incident response.
Diff
diff --git a/bedrock-agentcore/latest/devguide/gateway-target-connector-web-search-tool.md b/bedrock-agentcore/latest/devguide/gateway-target-connector-web-search-tool.md index dc5c1bebe..c2b6ec424 100644 --- a//bedrock-agentcore/latest/devguide/gateway-target-connector-web-search-tool.md +++ b//bedrock-agentcore/latest/devguide/gateway-target-connector-web-search-tool.md @@ -7 +7 @@ -Key capabilitiesPurpose-built web indexPrivate by designHow it worksUse casesSet up Web Search ToolConfigure domain filteringConfigure the Gateway Service RoleInput schemaResponse formatAvailabilityAcceptable use +Key capabilitiesPurpose-built web indexPrivate by designHow it worksUse casesSet up Web Search ToolUse with a harnessConfigure domain filteringConfigure the Gateway Service RoleInput schemaResponse formatAvailabilityAcceptable use @@ -32,0 +33,2 @@ The following sections walk through the key capabilities, the architecture of th + * Use with a harness + @@ -131,0 +134,4 @@ For instructions on how to create a Gateway Target with the Web Search Tool conn +## Use with a harness + +To give an [AgentCore harness](./harness.html) web search capability, attach the gateway that you created in Set up Web Search Tool to the harness as an `agentcore_gateway` tool. The harness execution role requires the `bedrock-agentcore:InvokeGateway` permission on the gateway ARN. For the end-to-end walkthrough, see [Tools](./harness-tools.html) in the harness documentation. +