$npx -y skills add aws-samples/sample-agent-skills-for-builders --skill aws-agentic-aiAWS Bedrock AgentCore comprehensive expert for deploying and managing AI agents at scale. Use when working with any AgentCore service including Gateway, Runtime, Memory, Identity, Code Interpreter, Browser, Observability, Agent Registry, or Evaluations. Covers agent deployment, M
| 1 | # AWS Bedrock AgentCore |
| 2 | |
| 3 | AWS Bedrock AgentCore provides a complete platform for deploying and scaling AI agents with nine core services. This skill covers service selection, deployment patterns, and integration workflows using AWS CLI. |
| 4 | |
| 5 | **How to use this skill**: Identify the service(s) the user needs from the table below, then read the corresponding service README before responding. For cross-service patterns (credentials, security, registry integration), check the Cross-Service Resources section. Verify AWS-specific details using the MCP documentation tools. |
| 6 | |
| 7 | ## AWS Documentation Requirement |
| 8 | |
| 9 | Always verify AWS facts using MCP tools before answering. Two documentation sources are available: |
| 10 | - **AgentCore-specific docs** (`mcp__acdocs__*`) — bundled with this plugin, provides `search_agentcore_docs` and `fetch_agentcore_doc` for AgentCore documentation |
| 11 | - **General AWS docs** (`mcp__aws-mcp__*` or `mcp__*awsdocs*__*`) — loaded via the `aws-mcp-setup` dependency for broader AWS documentation |
| 12 | |
| 13 | Prefer the AgentCore docs MCP for AgentCore-specific questions. If MCP tools are unavailable, guide the user through the `aws-mcp-setup` skill's setup flow. |
| 14 | |
| 15 | ## Available Services |
| 16 | |
| 17 | | Service | Use For | Documentation | |
| 18 | |---------|---------|---------------| |
| 19 | | **Gateway** | Converting REST APIs to MCP tools | [`services/gateway/README.md`](services/gateway/README.md) | |
| 20 | | **Runtime** | Deploying and scaling agents | [`services/runtime/README.md`](services/runtime/README.md) | |
| 21 | | **Memory** | Managing conversation state | [`services/memory/README.md`](services/memory/README.md) | |
| 22 | | **Identity** | Credential and access management | [`services/identity/README.md`](services/identity/README.md) | |
| 23 | | **Code Interpreter** | Secure code execution in sandboxes | [`services/code-interpreter/README.md`](services/code-interpreter/README.md) | |
| 24 | | **Browser** | Web automation and scraping | [`services/browser/README.md`](services/browser/README.md) | |
| 25 | | **Observability** | Tracing and monitoring | [`services/observability/README.md`](services/observability/README.md) | |
| 26 | | **Agent Registry** | Catalog, discover, and govern agents/tools (Preview) | [`services/registry/README.md`](services/registry/README.md) | |
| 27 | | **Evaluations** | Automated agent quality assessment (LLM-as-a-Judge) | [`services/evaluations/README.md`](services/evaluations/README.md) | |
| 28 | |
| 29 | ## Common Workflows |
| 30 | |
| 31 | ### Deploying a Gateway Target |
| 32 | |
| 33 | Read [`services/gateway/README.md`](services/gateway/README.md) before implementing — Gateway setup involves deployment strategies, IAM, and auth choices that vary significantly by use case. |
| 34 | |
| 35 | 1. Upload OpenAPI schema to S3 |
| 36 | 2. *(API Key auth only)* Create credential provider and store API key |
| 37 | 3. Create gateway target linking schema (and credentials if using API key) |
| 38 | 4. Verify target status and test connectivity |
| 39 | |
| 40 | > Credential provider is only needed for API key authentication. Lambda targets use IAM roles, and MCP servers use OAuth. |
| 41 | |
| 42 | ### Managing Credentials |
| 43 | |
| 44 | Read [`cross-service/credential-management.md`](cross-service/credential-management.md) first — credential patterns differ across services and getting them wrong causes hard-to-debug auth failures. |
| 45 | |
| 46 | 1. Use Identity service credential providers for all API keys |
| 47 | 2. Link providers to gateway targets via ARN references |
| 48 | 3. Rotate credentials quarterly through credential provider updates |
| 49 | 4. Monitor usage with CloudWatch metrics |
| 50 | |
| 51 | ### Discovering Agents and Tools (Agent Registry) |
| 52 | |
| 53 | Read [`services/registry/README.md`](services/registry/README.md) first — the registry has governance workflows, MCP endpoint options, and sync modes that affect how records become discoverable. |
| 54 | |
| 55 | 1. Create |