Securing Amazon Bedrock AgentCore Runtime with AWS WAF

This article presents two architecture patterns for securing Amazon Bedrock AgentCore Runtime with AWS WAF through an Application Load Balancer and VPC Interface Endpoint.

• Pattern 1 uses a Lambda proxy between ALB and VPC Endpoint for request transformation and custom authentication logic
• Pattern 2 targets VPC Endpoint ENI IPs directly from ALB for minimal latency and simplicity
• Both patterns solve the health check authentication challenge by using unauthenticated health checks while passing authenticated production traffic
• Resource policies prevent direct access to AgentCore, ensuring all traffic flows through AWS WAF
• Defense-in-depth security includes AWS WAF, security groups, authentication, and resource policies
• Pattern 1 adds 50-200ms latency but enables request transformation; Pattern 2 has no Lambda overhead

Both patterns provide tested implementations for securing AI agent deployments with multiple security layers while supporting SigV4 and OAuth authentication methods.