Private connectivity patterns for Amazon Bedrock AgentCore Gateway Targets

This article explains four private connectivity patterns for Amazon Bedrock AgentCore Gateway to securely route traffic to targets without using the public internet.

• MCP server targets connect via Amazon VPC Lattice private endpoints (managed or self-managed)
• REST API targets use private endpoints with OpenAPI specifications and routing domains
• Regional REST API Gateway targets route through VPC Link V1 or V2 for private VPC access
• AWS Lambda targets use Hyperplane ENI for VPC connectivity to private resources
• Advanced patterns support on-premises connectivity via Direct Connect or Site-to-Site VPN
• Multi-cloud connectivity available through VPN or AWS Interconnect to other cloud providers
• Multi-VPC/account scenarios use VPC peering, Transit Gateway, Cloud WAN, or AWS RAM

The post provides architecture guidance for platform engineers designing secure, compliant agentic AI workloads across various deployment scenarios.