117 Commits

Author SHA1 Message Date
Kamal Manchanda
de3867d002 Removed client secret from env file and some cleanup to remove files which are not used 2025-08-26 17:56:40 +05:30
dependabot[bot]
443c29a637
fix(02-use-cases): build(deps): Bump python-multipart (#250)
Bumps [python-multipart](https://github.com/Kludex/python-multipart) from 0.0.6 to 0.0.18.
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Kludex/python-multipart/compare/0.0.6...0.0.18)

---
updated-dependencies:
- dependency-name: python-multipart
  dependency-version: 0.0.18
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-25 17:09:41 -04:00
Eashan Kaushik
ade95b51ca
fix(02-use-cases): Update create-gateway.py (#291)
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-25 16:43:30 -04:00
Eashan Kaushik
d9f9dffdf8
fix(agentcore-samples): fix for code scanning: Clear-text logging of sensitive information (#286)
* Potential fix for code scanning

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 65: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update setup_database_access.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 41: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 40: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update setup_cognito.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 39: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update retrieve_api_key.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 34: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 33: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 32: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update oauth_test.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 29: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update get_customer_profile.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 28: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update deploy_agent_runtime.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 25: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update credentials_manager.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 18: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update create-gateway.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 15: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update config.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 14: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update cognito_oauth_setup.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 13: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update auth.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 9: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update deploy_agent_runtime.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update retrieve_api_key.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update retrieve_api_key.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update deploy_agent_runtime.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

---------

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-08-25 16:09:11 -04:00
dependabot[bot]
d5712f3d3d
fix(02-use-cases): build(deps): Bump python-jose (#251)
Bumps [python-jose](https://github.com/mpdavis/python-jose) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mpdavis/python-jose/compare/3.3.0...3.4.0)

---
updated-dependencies:
- dependency-name: python-jose
  dependency-version: 3.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-25 16:03:11 -04:00
dependabot[bot]
8d509c3066
fix(02-use-cases): build(deps): Bump jinja2 (#252)
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.2 to 3.1.6.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/3.1.2...3.1.6)

---
updated-dependencies:
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-25 16:02:55 -04:00
dependabot[bot]
235ae36051
fix(02-use-cases): build(deps): Bump starlette (#183)
Bumps [starlette](https://github.com/encode/starlette) from 0.47.1 to 0.47.2.
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](https://github.com/encode/starlette/compare/0.47.1...0.47.2)

---
updated-dependencies:
- dependency-name: starlette
  dependency-version: 0.47.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-25 16:02:16 -04:00
Jason Perry
de3aa84921
Fix(01-AgentCore-runtime): avoid duplicate final output in Strands+Bedrock notebook (#290) 2025-08-25 16:01:04 -04:00
Eqbal Murad
821340657a
fix(02-use-cases): Update .dockerignore to include Dockerfile in codebuild project (#263)
Signed-off-by: Eqbal Murad <eqbal.m@gmail.com>
2025-08-25 15:17:53 -04:00
David L.
1e971cc855
feat(agentcore-samples): Create CONTRIBUTORS.md (#125)
* Create CONTRIBUTORS.md

Signed-off-by: David L. <32494274+architec@users.noreply.github.com>

* Create CONTRIBUTORS.md and add all contributors

Signed-off-by: David L. <32494274+architec@users.noreply.github.com>

---------

Signed-off-by: David L. <32494274+architec@users.noreply.github.com>
2025-08-25 14:49:23 -04:00
Eashan Kaushik
72662f73ef
feat(Add CodeQL code scanning): Adding codeql.yml workflow(#285)
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-25 14:44:21 -04:00
JuliaHu
a48b6d9bd3
fix(02-use-cases): New end to end user case: farm management example pull request (#234)
* Add a new Farm management use case to 02-use-cases

* feat:modify readme

* feat:modify solution diagram

* feat:modify cleanup

* remove datastore

* remove all datastore

* remove unnecessary files

* modify file structure

* remove ds_store
2025-08-25 14:13:38 -04:00
Eashan Kaushik
33bb9e8de1
feat(Labeler): Add Labeler automation (#287)
* Create label.yml

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Create labeler.yml

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update labeler.yml

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update labeler.yml

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

---------

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-25 13:57:31 -04:00
Liam
492ea5c0df
fix module error because utils is imported before the path hack (#280)
Signed-off-by: Liam <101819487+liwadman@users.noreply.github.com>
2025-08-22 08:30:35 -05:00
mvangara10
ed640c243c
fix(01-tutorials): CodeQL: Security fix for Gateway (#278)
* AgentCore Observability

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* .env.example

* add runtime utils.py

Signed-off-by: mvangara10 <mvangara@amazon.com>

* AgentCore Observability: Custom Spans

* Update doc

* runtime hosted agent update

* Refactoring and Runtime updates

* Custom span documentation

* Observability runtime: auto_create_role

* Model ID and STM fix

* Model ID update

* Non runtime: strands package update and fix

* DDGS and ModelID upddates

* Claude 3.5 -> 3.7

* CodeQL fix

---------

Signed-off-by: mvangara10 <mvangara@amazon.com>
2025-08-21 15:47:56 -04:00
Sundar Raghavan
49547d7c85
Fix security issues identified by CodeQL scan (#277)
- Fixed socket binding to use 127.0.0.1 instead of all interfaces
- Improved error handling to prevent stack trace exposure
- Additional security improvements
2025-08-21 12:35:13 -04:00
Godwin Vincent
1b6c689c6a
Device management agent - • Upgrading from the vulnerable version 3.3.0 to the patched version 3.4.0 (#274)
* updated README.md file with bearer token generation

* updated README.md file with bearer token generation-removed client id and secret credentials

* removed hardcoded domain

* added agent runtime, frontend, observability and agentcore identity

* update README.md file to reflect frontend testing

* fixed Client-side cross-site scripting and DOM text reinterpreted as HTML

* fixed Client-side cross-site scripting and DOM text reinterpreted as HTML

* • Upgrading from the vulnerable version 3.3.0 to the patched version 3.4.0
• Fixing the algorithm confusion vulnerability with OpenSSH ECDSA keys (similar to CVE-2022-29217)
• Resolving the 2 Dependabot alerts mentioned in the pull request
2025-08-21 10:02:57 -04:00
Akarsha Sehwag
fee1b77007
Tutorial E2E: updates (#269)
* minor typo update

* fix(memory): update memory retrieval snippets

* feat(memory)update lab 2

* fix(utils): update print statement
2025-08-20 15:56:37 -04:00
Godwin Vincent
0c0d7b2f17
Device management agent - fixed Client-side cross-site scripting and DOM text reinterpreted as HTML #92 and #93 (#268)
* updated README.md file with bearer token generation

* updated README.md file with bearer token generation-removed client id and secret credentials

* removed hardcoded domain

* added agent runtime, frontend, observability and agentcore identity

* update README.md file to reflect frontend testing

* fixed Client-side cross-site scripting and DOM text reinterpreted as HTML

* fixed Client-side cross-site scripting and DOM text reinterpreted as HTML
2025-08-20 14:30:20 -04:00
Tejas Dastane
e088a12491
Set baseline mcp client version to 1.9.0 (#267)
Notes:
- AgentCore Gateway today only supports MCP Protocol version 2025-03-26.
- MCP protocol version support only starts after mcp>=1.9.0 so adding it as a requirement.

Testing:
- Created new venv and installed all requirements according to requirements.txt
- Started the MCP S3 agentcore gateway notebook and it was able to run successfully.

Co-authored-by: Tejas Dastane <tdastan@amazon.com>
2025-08-20 11:21:43 -07:00
mvangara10
2250878687
AgentCore memory: Model ID update (#265)
* AgentCore Observability

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* .env.example

* add runtime utils.py

Signed-off-by: mvangara10 <mvangara@amazon.com>

* AgentCore Observability: Custom Spans

* Update doc

* runtime hosted agent update

* Refactoring and Runtime updates

* Custom span documentation

* Observability runtime: auto_create_role

* Model ID and STM fix

* Model ID update

* Non runtime: strands package update and fix

* DDGS and ModelID upddates

* Claude 3.5 -> 3.7

---------

Signed-off-by: mvangara10 <mvangara@amazon.com>
2025-08-18 11:41:14 -04:00
satveerkhurpa
9e1bef4bd0
fix(01-tutorials): Updated README for AgentCore identity(#264)
Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-18 11:28:25 -04:00
rahullks
3351a6de99
Update run-commands-using-code-interpreter.ipynb (#259)
mask account id in the policy

Signed-off-by: rahullks <rahullks@gmail.com>
2025-08-15 11:46:27 -07:00
satveerkhurpa
e140a1d5f3
Updated additional permissions (#258)
Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-15 13:22:25 -04:00
Liam
ed9345c1f0
removing wildcard getsecretvalue (#257)
namespacing it to getsecretvalue

Signed-off-by: Liam <101819487+liwadman@users.noreply.github.com>
2025-08-15 12:06:07 -05:00
Akarsha Sehwag
523a9cb49e
fix: region update for E2E workshop (#256)
* fix: region update

* update default region
2025-08-15 09:51:25 -04:00
Maira Ladeira Tanke
c573bae4b1
Adding readme to end-to-end tutorial (#255)
* Adding readme to end-to-end tutorial

* Adding opentelemetry requirements to end-to-end workshop
2025-08-14 23:25:36 -04:00
Akarsha Sehwag
ce1e2d8367
Add Workshop E2E (#253)
* feat: e2e tutorial lab5

* docs: Add README.md for 05-AgentCore Observability lab

* feat: Add Lab 6 of E2E tutorial

* fix: Fix Agent ECR repository typo

* docs: Update Lab 6 Guidelines

* feat: cleanup guardrails

* docs: fix step name

* added lab4

* Add Lab 3 Identity Notebook and README

* added memory and updated lab 1

* pushing all of the helper files from original use case. Remove as needed

* feat: update lab1 helper file

* chore: restructure utils

* feat: update memory helper

* chore: restructure identity

* chore: append to agent definition from the helper

* Renamed agentcore identity to lab6

* Renamed Gateway notebook to Lab 3 and reviewed with fixes

* Fixed typo in delete_memory

* Lab 1: review and minor fixes

* Lab 1: cleanup

* Lab 2: refactored

* fix: change model to Claude 3.7

* added TODOs

* updated lab1 notebook

* update runtime intro

* refactor utils file

* minor_update to memory

* memory return client

* revert change.

* feat: update runtime lab

* feat: add helper for bedrock guardrails

* fix: fix typos

* docs: minor update

* update lab1 tools

* update memory

* update - runtime

* updated lab3 + lambda

* removed outputs

* changed sh

* removed zip

* added one missing piece

* chore: rm observability old lab

* Updates to Lab6 Identity

* Updates to Lab6 Identity

* updated arch. diagram

* update docs lab1

* rename-lab-5-6

* update arch doc

* lab 03

* fixed lab 3 docs

* Fix Lab 4

* Lab 7 frontend

* Fix lab7

* Fix prereq issues and update gitignore

* adding lab 3 tool removal

* removed checkpoints

* merged

* chore: Update Lab 4 documentation

* fix: Update AgentCore IAM Role to access memory

* Lab 7 fixed invoke to runtime

* minor changes

* removed guardrails + minor edits

* Deleting files and folders.

* Rename, Refactor and deletion

Added sagemaker_helper

* fixing Client

* Removing guardrails code

* remove unused arch

* remove unused files

* updating lab01

* remove policies

* updating lab02

* docs: Update lab 4 markdown

* chore: Update Lab 4

* update cleanup

* cleaning up DS_Store files

* frontend

* updates to lab1 notebook

* updating architectures

* Lab5: fixed response formatting in streamlit app

* updating lab3

* updated lab3

* Lab 5 and Lab 6 and Helper Scripts Updates

Lab 5: Added the architecture diagram
Lab 6: Updated the notebook
Utils: Added helper functions
Sagemaker_helper: Cosmetic Updates

* Updating lab 4

* removing clean up from lab 3

* added lab3 changes

* Streamlit Fixes, Cosmetic Updates, Notebook Updates

* add maira's changes

* update lab2+3

* minor updates

* sync labs

* fix runtime docs

* refactoring end-to-end tutorials

* remove guardrail ss

---------

Co-authored-by: Aleksei Iancheruk <aianch@amazon.fr>
Co-authored-by: EugeneSel <youdjin.sel15@gmail.com>
Co-authored-by: Aidan Ricci <riaidan@amazon.com>
Co-authored-by: Achintya <pinnintiachintya@gmail.com>
Co-authored-by: naresh rajaram <nareshrd@amazon.com>
Co-authored-by: Lorenzo Micheli <lorenzo.micheli@gmail.com>
Co-authored-by: Achintya <apinnint@amazon.com>
Co-authored-by: HT <hardikvt@amazon.com>
Co-authored-by: HT <hardik.thakkar00@gmail.com>
Co-authored-by: Maira Ladeira Tanke <mttanke@amazon.com>
2025-08-14 22:52:33 -04:00
rohillasandeep
a97b6e6e8b
Update AWS Operations Agent README.md (#235)
* Update AWS operations agent configuration and documentation - preserve local changes

* Update AWS operations agent README.md

* Update OKTA OpenID PKCE setup documentation

* Update OKTA authentication configuration and nginx setup

* Update OKTA OpenID PKCE setup documentation

* Update static-config.yaml for AWS operations agent

* Update AWS Operations Agent README.md

---------

Signed-off-by: rohillasandeep <31911590+rohillasandeep@users.noreply.github.com>
Co-authored-by: name <alias@amazon.com>
2025-08-14 14:25:11 -07:00
Megan Dsouza
47d9cbda53
Adding sample for running typescript MCP server on Agentcore Runtime (#194)
* Adding Sample for Running typescript MCP server on Agentcore Runtime

* Adding an mcp client and minor fixes
2025-08-14 13:42:27 -04:00
Aswathy Prasad
d966aa00f6
New example of PydanticAI Agent on AgentCore Runtime (#248)
* run pydantic ai agent in bedrock agentcore runtime.  requirements file notebook and figures commited. Tested in AWS account

* update description in notebook cells to suit pydantic framework. Agent Image changed to pydantic

* removed image for local architecture, as it is unused in the notebook

* moved pydantic agent code file and noteook to create runtime  into 03-integrations

---------

Co-authored-by: Aswathy Prasad <aswpras@amazon.com>
2025-08-14 13:37:39 -04:00
Hardik Thakkar
01c2e5f534
Adding bedrock_agentcore (#254) 2025-08-13 22:09:27 -04:00
Godwin Vincent
cd0a29d2ae
Device management agent - AgentCore runtime, observability, frontend added (#241)
* updated README.md file with bearer token generation

* updated README.md file with bearer token generation-removed client id and secret credentials

* removed hardcoded domain

* added agent runtime, frontend, observability and agentcore identity

* update README.md file to reflect frontend testing
2025-08-13 09:31:29 -07:00
Amit Arora
ff5fdffd42
fix(02-use-cases): Add multi-region support for SRE-Agent (#246)
* Add multi-region support for SRE-Agent

- Add AWS region configuration parameter to agent_config.yaml
- Update gateway main.py to validate region matches endpoint URL
- Modify SRE agent to read region from config and pass through function chain
- Update memory client and LLM creation to use configurable region
- Fixes hardcoded us-east-1 region dependencies

Closes #245

* Move architecture file to docs/ and improve setup instructions

- Move sre_agent_architecture.md to docs/ folder for better organization
- Update graph export code to generate architecture file in docs/ folder
- Add automatic docs directory creation if it doesn't exist
- Improve README setup instructions:
  - Fix .env.example copy path to use sre_agent folder
  - Add note that Amazon Bedrock users don't need to modify .env
  - Add START_API_BACKEND variable to conditionally start backend servers
  - Useful for workshop environments where backends are already running

* Improve gateway configuration documentation and setup instructions

- Update config.yaml.example to use REGION placeholder instead of hardcoded us-east-1
- Add gateway configuration step to README setup instructions
- Document .cognito_config file in auth.md automated setup section
- Remove duplicate credential_provider_name from config.yaml.example
- Update configuration.md to include .cognito_config in files overview
- Add clear instructions to copy and edit gateway/config.yaml before creating gateway

* Improve IAM role guidance and region handling

- Add clear guidance about IAM role options in gateway/config.yaml.example
- Explain that testing can use current EC2/notebook role
- Recommend dedicated role for production deployments
- Add aws sts get-caller-identity command to help users find their role
- Update deployment scripts to use AWS_REGION env var as fallback
- Scripts now follow: CLI arg -> AWS_REGION env var -> us-east-1 default

* Remove unnecessary individual Cognito ID files

- Remove creation of .cognito_user_pool_id file
- Remove creation of .cognito_client_id file
- Keep only .cognito_config as the single source of truth
- Simplifies configuration management

* Implement region fallback logic for SRE Agent

- Added region fallback chain: agent_config.yaml -> AWS_REGION env -> us-east-1
- Modified agent_config.yaml to comment out region parameter to enable fallback
- Updated multi_agent_langgraph.py with comprehensive fallback implementation
- Added logging to show which region source is being used
- Ensures flexible region configuration without breaking existing deployments
- Maintains backward compatibility while adding multi-region support
2025-08-13 08:32:37 -04:00
Hardik Thakkar
325600d958
removing optional http invoke for inbound auth from the lab (#244)
Co-authored-by: HT <hardikvt@amazon.com>
2025-08-12 09:30:47 -05:00
satveerkhurpa
117fd3a472
Tested the 3lo example with us-west-2 and updated instructions (#243)
Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-12 14:39:06 +02:00
mvangara10
35a0af2bc5
Import DDGS and Model ID updates (#240)
* AgentCore Observability

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* .env.example

* add runtime utils.py

Signed-off-by: mvangara10 <mvangara@amazon.com>

* AgentCore Observability: Custom Spans

* Update doc

* runtime hosted agent update

* Refactoring and Runtime updates

* Custom span documentation

* Observability runtime: auto_create_role

* Model ID and STM fix

* Model ID update

* Non runtime: strands package update and fix

* DDGS and ModelID upddates

---------

Signed-off-by: mvangara10 <mvangara@amazon.com>
2025-08-11 18:42:21 -04:00
satveerkhurpa
a42cb6fab1
fix(01-tutorials): Updated the Cognito pwd in the prereq and model access info for the Bedrock model (#239)
Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-11 18:27:17 -04:00
Akarsha Sehwag
b8d2cc14b9
Fix/workshop changes (#238)
* fix: minor changes

* fix: update memory prompt
2025-08-11 18:24:59 -04:00
satveerkhurpa
6d0becc8d9
fix(01-tutorials): cleanup .DS_store (#233)
* cleanup

* cleanup

---------

Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-11 18:24:41 -04:00
Akarsha Sehwag
da4db6932c
fix(02-use-cases): minor changes (#237) 2025-08-11 17:36:20 -04:00
rohillasandeep
6b02c0c482
fix(02-use-cases): Updated AWS Operations agents Readme.md (#229)
* Update AWS operations agent configuration and documentation - preserve local changes

* Update AWS operations agent README.md

* Update OKTA OpenID PKCE setup documentation

* Update OKTA authentication configuration and nginx setup

* Update OKTA OpenID PKCE setup documentation

---------

Co-authored-by: name <alias@amazon.com>
2025-08-11 10:03:46 -04:00
satveerkhurpa
28d28f526c
Updated region and instructions for GitHub app registration (#232)
Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-11 14:01:06 +02:00
satveerkhurpa
f66086abba
Added Streamlit app for end-to-end testing (#231)
Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-11 12:11:33 +02:00
dendilaws
b879c075cf
updated to ddgs from duckduckgo_search (#228)
notebook referencing "duckduckgo_search" while the requirements is using "ddgs". Updating the code to use "ddgs"

Signed-off-by: dendilaws <dendilaws@gmail.com>
2025-08-10 17:09:13 -04:00
satveerkhurpa
3119bdddf6
Adding a 3LO example with Github credential provider (#226)
Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-10 10:47:26 +02:00
satveerkhurpa
06bc9c2a1e
Adding a 3LO example with Google credential provider (#225)
* Adding a 3LO example with Google credential provider

* Spell check updates

---------

Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-10 10:45:24 +02:00
rohillasandeep
01246a98b2
Configuration Management Fixes (#223)
* feat: Add AWS Operations Agent with AgentCore Runtime

- Complete rewrite of AWS Operations Agent using Amazon Bedrock AgentCore
- Added comprehensive deployment scripts for DIY and SDK runtime modes
- Implemented OAuth2/PKCE authentication with Okta integration
- Added MCP (Model Context Protocol) tool support for AWS service operations
- Sanitized all sensitive information (account IDs, domains, client IDs) with placeholders
- Added support for 17 AWS services: EC2, S3, Lambda, CloudFormation, IAM, RDS, CloudWatch, Cost Explorer, ECS, EKS, SNS, SQS, DynamoDB, Route53, API Gateway, SES, Bedrock, SageMaker
- Includes chatbot client, gateway management scripts, and comprehensive testing
- Ready for public GitHub with security-cleared configuration files

Security: All sensitive values replaced with <YOUR_AWS_ACCOUNT_ID>, <YOUR_OKTA_DOMAIN>, <YOUR_OKTA_CLIENT_ID> placeholders

* Update AWS Operations Agent architecture diagram

* feat: Enhance AWS Operations Agent with improved testing and deployment

- Update README with new local container testing approach using run-*-local-container.sh scripts
- Replace deprecated SAM-based MCP Lambda deployment with ZIP-based deployment
- Add no-cache flag to Docker builds to ensure clean builds
- Update deployment scripts to use consolidated configuration files
- Add comprehensive cleanup scripts for all deployment components
- Improve error handling and credential validation in deployment scripts
- Add new MCP tool deployment using ZIP packaging instead of Docker containers
- Update configuration management to use dynamic-config.yaml structure
- Add local testing capabilities with containerized agents
- Remove outdated test scripts and replace with interactive chat client approach

* fix: Update IAM policy configurations

- Update bac-permissions-policy.json with enhanced permissions
- Update bac-trust-policy.json for improved trust relationships

* fix: Update Docker configurations for agent runtimes

- Update Dockerfile.diy with improved container configuration
- Update Dockerfile.sdk with enhanced build settings

* fix: Update OAuth iframe flow configuration

- Update iframe-oauth-flow.html with improved OAuth handling

* feat: Update AWS Operations Agent configuration and cleanup

- Update IAM permissions policy with enhanced access controls
- Update IAM trust policy with improved security conditions
- Enhance OAuth iframe flow with better UX and error handling
- Improve chatbot client with enhanced local testing capabilities
- Remove cache files and duplicate code for cleaner repository

* docs: Add architecture diagrams and update README

- Add architecture-2.jpg and flow.jpg diagrams for better visualization
- Update README.md with enhanced documentation and diagrams

* Save current work before resolving merge conflicts

* Keep AWS-operations-agent changes (local version takes precedence)

* Fix: Remove merge conflict markers from AWS-operations-agent files - restore clean version

* Fix deployment and cleanup script issues

Major improvements and fixes:

Configuration Management:
- Fix role assignment in gateway creation (use bac-execution-role instead of Lambda role)
- Add missing role_arn cleanup in MCP tool deletion script
- Fix OAuth provider deletion script configuration clearing
- Improve memory deletion script to preserve quote consistency
- Add Lambda invoke permissions to bac-permissions-policy.json

Script Improvements:
- Reorganize deletion scripts: 11-delete-oauth-provider.sh, 12-delete-memory.sh, 13-cleanup-everything.sh
- Fix interactive prompt handling in cleanup scripts (echo -e format)
- Add yq support with sed fallbacks for better YAML manipulation
- Remove obsolete 04-deploy-mcp-tool-lambda-zip.sh script

Architecture Fixes:
- Correct gateway role assignment to use runtime.role_arn (bac-execution-role)
- Ensure proper role separation between gateway and Lambda execution
- Fix configuration cleanup to clear all dynamic config fields consistently

Documentation:
- Update README with clear configuration instructions
- Maintain security best practices with placeholder values
- Add comprehensive deployment and cleanup guidance

These changes address systematic issues with cleanup scripts, role assignments,
and configuration management while maintaining security best practices.

* Update README.md with comprehensive documentation

Enhanced documentation includes:
- Complete project structure with 75 files
- Step-by-step deployment guide with all 13 scripts
- Clear configuration instructions with security best practices
- Dual agent architecture documentation (DIY + SDK)
- Authentication flow and security implementation details
- Troubleshooting guide and operational procedures
- Local testing and container development guidance
- Tool integration and MCP protocol documentation

The README now provides complete guidance for deploying and operating
the AWS Support Agent with Amazon Bedrock AgentCore system.

---------

Co-authored-by: name <alias@amazon.com>
2025-08-09 13:51:24 -07:00
Amit Arora
163a0ba07b
feat(02-use-cases): Add observability support and update documentation (#222)
* feat(sre-agent): add OpenTelemetry observability and tracing

- Add OpenTelemetry tracing to supervisor and memory tools
- Configure OTEL collector with Jaeger backend via docker-compose
- Add trace context propagation between supervisor and workers
- Include run-with-tracing.sh helper script for easy tracing setup
- Update blog post with comprehensive observability section
- Add presentation slides for SRE agent capabilities

* docs(sre-agent): replace mermaid diagram with architecture image

- Replace inline mermaid diagram with external architecture PNG image
- Add detailed component descriptions for AgentCore integration
- Image shows complete flow from customer to AgentCore services

* feat(sre-agent): add assets table with demo video and AI podcast links

- Add assets section with clickable links to demo video and AI-generated podcast
- Include descriptions for each asset to help users understand the content
- Position table prominently after the use case details for visibility

* docs(sre-agent): update blog post with latest code snippets and improvements

- Update Dockerfile snippet to include OpenTelemetry instrumentation
- Update invoke_agent_runtime.py snippet with timeout config and memory personalization
- Remove verbose real-time agent execution traces section while keeping key insights
- Simplify cleanup section to show only essential command
- Ensure all code snippets match latest implementation

* style(sre-agent): apply ruff formatting to Python files

- Format code with ruff formatter for consistent style
- Fix whitespace and indentation issues
- Apply standard Python formatting conventions
- Ensure code adheres to project style guidelines

* chore(sre-agent): remove slide files from docs

- Remove presentation slide markdown files
- Clean up docs directory structure

* Update blog post: Change S3 target references to API Endpoint Target

- Updated section heading from 'Deploy S3 targets' to 'Deploy API Endpoint Targets'
- Renamed function from create_s3_target to create_api_endpoint_target
- Updated variable name from s3_target_config to api_target_config
- Clarified that OpenAPI specs are used to create API Endpoint Targets

* Update README assets section with two demo videos

- Renamed first video to 'Demo video 1 (SRE-Agent CLI, VSCode integration)'
- Added 'Demo video 2 (Cursor integration)' with new link
- Clarified descriptions for both demo videos

* Update Demo video 2 description to specify AgentCore Gateway integration

- Changed description to 'Demonstration of AgentCore Gateway with SRE tools integration with Cursor IDE'
- More accurately describes the specific integration being demonstrated

* Update blog post Real-world use cases section with accurate agent behavior

- Changed 'agents work in parallel' to 'agents work sequentially' based on agent.log evidence
- Updated command example to use correct USER_ID environment variable instead of --user-id parameter
- Added comprehensive memory system integration explanation
- Reduced verbosity of trace outputs while maintaining key technical details
- Updated investigation plan and executive summary to match actual agent.log output format
- Added all five AgentCore primitives working together: Gateway, Identity, Runtime, Memory, and Observability

---------

Signed-off-by: Amit Arora <aroraai@amazon.com>
2025-08-08 15:25:55 -04:00
Amit Arora
cdb450260a
feat(02-usecases): add observability support and documentation improvements (#220)
* feat(sre-agent): add OpenTelemetry observability and tracing

- Add OpenTelemetry tracing to supervisor and memory tools
- Configure OTEL collector with Jaeger backend via docker-compose
- Add trace context propagation between supervisor and workers
- Include run-with-tracing.sh helper script for easy tracing setup
- Update blog post with comprehensive observability section
- Add presentation slides for SRE agent capabilities

* docs(sre-agent): replace mermaid diagram with architecture image

- Replace inline mermaid diagram with external architecture PNG image
- Add detailed component descriptions for AgentCore integration
- Image shows complete flow from customer to AgentCore services

* feat(sre-agent): add assets table with demo video and AI podcast links

- Add assets section with clickable links to demo video and AI-generated podcast
- Include descriptions for each asset to help users understand the content
- Position table prominently after the use case details for visibility

* docs(sre-agent): update blog post with latest code snippets and improvements

- Update Dockerfile snippet to include OpenTelemetry instrumentation
- Update invoke_agent_runtime.py snippet with timeout config and memory personalization
- Remove verbose real-time agent execution traces section while keeping key insights
- Simplify cleanup section to show only essential command
- Ensure all code snippets match latest implementation

* style(sre-agent): apply ruff formatting to Python files

- Format code with ruff formatter for consistent style
- Fix whitespace and indentation issues
- Apply standard Python formatting conventions
- Ensure code adheres to project style guidelines

* chore(sre-agent): remove slide files from docs

- Remove presentation slide markdown files
- Clean up docs directory structure
2025-08-08 09:22:15 -04:00