139 Commits

Author SHA1 Message Date
Uriel Ramirez
f4f13ffd7e
Cognito Authentication Added (#342)
* Data Analyst Assistant Solution with Amazon Bedrock AgentCore

* Data Analyst Assistant Solution with Amazon Bedrock AgentCore

* Data Analyst Assistant Solution with Amazon Bedrock AgentCore

* Data Analyst Assistant Solution with Amazon Bedrock AgentCore

* Data Analyst Assistant Solution with Amazon Bedrock AgentCore

* Data Analyst Assistant Solution with Amazon Bedrock AgentCore

* Data Analyst Assistant Solution with Amazon Bedrock AgentCore

* File updates and content

* Memory creation in the same region

* Memory handling correction

* Memory handling correction

* Cognito Authentication Added

* Cognito Authentication Added

---------

Co-authored-by: Uriel Ramirez <beralfon@amazon.com>
2025-09-08 13:51:32 -05:00
Daniel Mitchell
9038834249
AgentCore Runtime and Memory integration (#340)
* Added Guardrails Integration with Memory

* Update guardrails-memory.ipynb

* Update guardrails-memory.ipynb

* Update CONTRIBUTORS.md

* Added notebook on runtime and memory integration

* Fixes
2025-09-08 13:07:27 -04:00
dhegde-aws
765751ce45
MS Entra ID Integration Samples (#331)
* Create requirements.txt

Signed-off-by: dhegde-aws <dhegde@amazon.com>

* Sample notebooks

Signed-off-by: dhegde-aws <dhegde@amazon.com>

* Create test.txt

Signed-off-by: dhegde-aws <dhegde@amazon.com>

* Added images used in the notebook

Signed-off-by: dhegde-aws <dhegde@amazon.com>

* Added IDP examples and moved Entra ID Samples into the subfolder

* Renamed IDP examples folder to IDP-examples

* updated file names to remove space

* renamed files

* addressed pylint feedback in role_definition.py

* addressed uv ruff format --check feedback on role_definition.py

* removed option role_definition.py. using auto_create_execution_role=True

---------

Signed-off-by: dhegde-aws <dhegde@amazon.com>
2025-09-05 09:13:15 -05:00
Osman Santos
260eb7d80a
Sample - Multi-runtime, multi-framework example with boto3 invocation (#319)
* create readme

* Distributed multi-agent, multi-framework example with boto3 invocations

* update folder name

* update contributors

---------

Co-authored-by: Osman Santos <ozz@amazon.com>
2025-09-04 22:57:16 -04:00
nabaws
6fffc6aec2
fix(text-to-python-ide): updated to remove vulnerable react components (#297) 2025-09-04 16:42:25 -04:00
Hardik Thakkar
74cbb911c6
fix(01-tutorials): PR to fix typo add missing package and added name in contributors. (#334)
* Fix wording typo in notebook about user consent flow

cosmetic update

Signed-off-by: Hardik Thakkar <68253981+HardikThakkar94@users.noreply.github.com>

* Add pyyaml to requirements.txt

Signed-off-by: Hardik Thakkar <68253981+HardikThakkar94@users.noreply.github.com>

* Add HardikThakkar94 to CONTRIBUTORS.md

Signed-off-by: Hardik Thakkar <68253981+HardikThakkar94@users.noreply.github.com>

---------

Signed-off-by: Hardik Thakkar <68253981+HardikThakkar94@users.noreply.github.com>
2025-09-04 16:41:12 -04:00
Erez Weinstein
e2d9590a86
feat(market-trend-agent): market trends agent added (LangGraph sample) (#306)
* Add Market Trends Agent with Bedrock AgentCore browser integration

- Implements Strands-based agent for real-time stock data and business news
- Uses Bedrock AgentCore browser_client for web scraping
- Includes tools for Yahoo Finance stock data and Bloomberg news search
- Features professional market analysis with AI-powered insights
- Supports concurrent browser sessions for multiple stock comparisons
- Complete with tests, documentation, and clean requirements

* feat: Add Market Trends Agent with AgentCore integration

- Implement conversational broker card system with memory integration
- Add browser automation for real-time market data and news
- Create LangGraph-based agent architecture with tool orchestration
- Include deployment scripts and comprehensive documentation
- Add test scripts demonstrating broker profile workflow
- Configure Docker containerization for AgentCore Runtime

* feat: optimize memory management and fix deployment issues

- Fix memory creation to check existing memory first, eliminating ValidationException errors
- Extract memory tools into separate module for better organization
- Update deployment script with enhanced error handling and IAM permissions
- Add architecture documentation and diagrams
- Successfully deployed to burner account with Claude Sonnet 4 and multi-strategy memory

* fix: remove unsupported auto_update_on_conflict parameter and enable dynamic config

- Remove auto_update_on_conflict parameter from runtime.launch() call
- Allow .bedrock_agentcore.yaml to be generated dynamically by deploy script
- Successfully deployed to burner account (484363822803) with Claude Sonnet 4
- All tests passing: 4/4 (100% success rate)
- Agent fully functional with memory, market data, and news search capabilities

* fix:image link in readme

* fix:replaced image

* fix: resolve all linting errors and code quality issues

- Remove unused imports: tool, MemoryClient, ClientError, argparse, json, os, datetime, Any, re
- Fix f-strings without placeholders by converting to regular strings
- Remove unused variables: config_response, launch_result
- Clean up code to pass GitHub checks and improve maintainability

Fixes:
- deploy.py: 4 issues (f-strings + unused variables)
- market_trends_agent.py: 6 unused imports
- test_broker_card.py: 2 issues (unused import + f-string)
- tools/broker_card_tools.py: 2 unused imports
- tools/memory_tools.py: 3 issues (unused import + 2 f-strings)

* Changes to be committed:
	modified:   02-use-cases/market-trends-agent/.gitignore
	modified:   02-use-cases/market-trends-agent/tools/memory_tools.py

* fix: add back datetime import needed for session_id generation

The datetime import was accidentally removed but is still needed on line 27 for creating session IDs in the format 'market-{datetime.now().strftime('%Y%m%d%H%M%S')}'.

* refactor: remove Dockerfile from repo, let deployment auto-generate

- Remove Dockerfile from version control
- Add Dockerfile to .gitignore
- Deployment script will auto-generate Dockerfile with proper defaults
- Reduces repo clutter while maintaining deployment functionality
- Auto-generated Dockerfile will include necessary configurations

* Add uv support and fix news source reliability

- Add pyproject.toml with uv configuration
- Update README to use only uv commands
- Fix Reuters and CNBC URL issues with better error handling
- Add interactive chat instructions for users
- Improve browser tool with retry logic and reliable fallbacks"

* Fix memory management and add uv integration

- Fix broker identity confusion by enforcing identify_broker() workflow
- Improve actor_id consistency across memory operations
- Add enhanced error handling for news sources (Reuters/CNBC 503 errors)
- Add uv integration with pyproject.toml for faster dependency management
- Streamline README to uv-only workflow with interactive chat instructions
- Add reliable fallback news sources (Yahoo Finance, MarketWatch)

* Fix broker identification workflow and message filtering

- Enhanced system prompt to enforce mandatory broker identification
- Fixed tool_use/tool_result message pairing in filtering logic
- Added comprehensive test suite for broker memory storage
- Verified multi-strategy memory works for Tim Dunk and Maria Rodriguez

* Implement distributed memory coordination using SSM Parameter Store

- Added SSM Parameter Store for distributed memory ID coordination
- Enhanced race condition protection for deployment scenarios
- Updated IAM permissions to include SSM parameter access
- Prevents multiple memory instances during AgentCore deployment
- Maintains backward compatibility with local .memory_id file

* Add comprehensive cleanup script and documentation

- Created cleanup.py script to remove all deployed AWS resources
- Cleans up AgentCore runtime, memory, ECR, CodeBuild, S3, IAM, SSM
- Added safety features: dry-run mode, confirmation prompts, detailed logging
- Updated README with complete cleanup section and troubleshooting
- Tested cleanup successfully removes all resources except runtime (manual)
- Supports selective cleanup options (--skip-iam, --region, --dry-run)

* fix: resolve all lint errors in market trends agent

- Remove unused imports (json, time, extract_actor_id)
- Fix f-strings without placeholders in browser_tool.py
- Replace bare except clauses with specific exception handling
- Add proper logging for exception cases
- All files now pass ruff lint checks

---------

Signed-off-by: Erez Weinstein <125476602+erezweinstein5@users.noreply.github.com>
Co-authored-by: Erez Weinstein <erweinst@amazon.com>
2025-09-04 13:26:50 -04:00
Dheeraj Oruganty
0d9e88e609
Remove SARIF reporting from ASH workflow (#329) 2025-09-03 16:00:26 -04:00
dependabot[bot]
169a3f84c9
chore(deps): bump tj-actions/changed-files in /.github/workflows (#326)
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 41 to 46.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](https://github.com/tj-actions/changed-files/compare/v41...v46)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: '46'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-03 15:17:03 -04:00
Dheeraj Oruganty
c757b7f1b6
fix(agentcore-samples): Workflow CI/CD rework (#328)
* Add Ash, Dependabot, Lint check workflows for Pull Requests

* Fix ASH workflow: Use pip install and direct ash command

Based on official ASH documentation, the correct approach is:
1. Install ASH using pip (not uv tool)
2. Run ash command directly (not via uv tool run)

This follows the GitHub Actions example from the ASH documentation.

* Fix ASH workflow: Install scanner dependencies manually

- Install bandit, semgrep, detect-secrets, checkov via pip
- This ensures scanners run instead of being SKIPPED due to missing uv

* Update ASH security scan workflow with container mode and improved comment management

* Configure ASH container to show all security findings instead of limiting to 20

* Modify workflows to comment on runs

* Remove unused .ash.yaml configuration file

The ASH workflows create their own inline configurations and do not use this root config file
2025-09-03 15:11:27 -04:00
Lana Zhang
45f316723b
Nova Sonic AgentCore intgeration sample (#317)
* add nova sonic agentcore integration sample

* nova sonic integration sample add integration architecture and tooluse json

* nova sonic integration sample add integration architecture and tooluse json

* nova sonic integration sample add integration architecture and tooluse json

* nova sonic integration sample add integration architecture and tooluse json

* nova sonic integration sample add integration architecture and tooluse json

* novs sonic integration remove best practies

---------

Co-authored-by: Lana Zhang <lanaz@amazon.com>
2025-09-02 15:53:02 -04:00
Dheeraj Oruganty
e721e7870c
feat(agentcore-samples) Add GitHub Actions CI/CD workflows with comprehensive security scanning (ASH), dependency management (Dependabot), and code quality enforcement (#308)
* Add Ash, Dependabot, Lint check workflows for Pull Requests

* Fix ASH workflow: Use pip install and direct ash command

Based on official ASH documentation, the correct approach is:
1. Install ASH using pip (not uv tool)
2. Run ash command directly (not via uv tool run)

This follows the GitHub Actions example from the ASH documentation.

* Fix ASH workflow: Install scanner dependencies manually

- Install bandit, semgrep, detect-secrets, checkov via pip
- This ensures scanners run instead of being SKIPPED due to missing uv

* Update ASH security scan workflow with container mode and improved comment management

* Configure ASH container to show all security findings instead of limiting to 20
2025-09-02 10:32:36 -04:00
Sundar Raghavan
58b169a4de
Cleanup/remove ds store files (#313)
* docs: update ReadMe and remove DS Store files

* chore:update ReadMe and remove DS Store files

* chore:update ReadMe and remove DS Store files
2025-08-29 17:24:58 -04:00
Akarsha Sehwag
0c8d2335f9
fix(memory): update tutorial to use Agent state (#309)
* feat(memory): update tutorial to use Agent state

* feat(memory): update tutorial to use Agent state

* feat(memory): update tutorials to use state

* feat(memory): update tutorials to use agent State
2025-08-29 09:35:09 -04:00
Shreyas Subramanian
9dd4898a68
removing async shopping eg. (#316) 2025-08-29 01:17:47 -04:00
Sundar Raghavan
1c7e1861c1
Add Competitive Intelligence Agent with Bedrock AgentCore SDK (#221)
* Add Enterprise Web Intelligence Agent with Bedrock AgentCore Tools SDK
Automated browser navigation with CDP enhancements
Live viewing with DCV integration
Session recording and replay capabilities
LLM-powered content extraction
Code Interpreter for dynamic analysis
Comprehensive documentation and examples

* Moved project from old-folder to new-folder and updated files

* Refactor: Rename to enterprise-web-intelligence-agent and add Strands implementation alongside LangGraph
2025-08-27 15:17:28 -07:00
dmichellee
7db1709f01
fix memory tutorial personal agent sample on_message_added (#170)
Signed-off-by: Akarsha Sehwag <akshseh@amazon.de>
Co-authored-by: daeunlee <daeunlee@amazon.com>
Co-authored-by: Akarsha Sehwag <akshseh@amazon.de>
2025-08-27 14:47:04 -04:00
jlopezb
7aa17eb716
Update customer-support.ipynb (#217)
fix typo

Signed-off-by: jlopezb <jaylopezb@gmail.com>
2025-08-27 14:17:45 -04:00
Eashan Kaushik
c6cc88d508
feat(agentcore-samples): Update README.md (#296)
* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update pull_request_template.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update README.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Add files via upload

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update llms.txt

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Delete llms.txt

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

---------

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-27 12:04:21 -04:00
Liam
fdeafee66a
remove wildcard for secretsmanager:GetSecretValue (#299)
Signed-off-by: Liam <101819487+liwadman@users.noreply.github.com>
2025-08-26 16:28:37 -05:00
Eashan Kaushik
e8b53be65f
feat(templates): Update issue templates (#279)
* Update issue templates

* Update and rename bug-report--01-tutorials-.md to bug-report-01-tutorials.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Rename documentation-improvement--01-tutorials-.md to documentation-improvement-01-tutorials.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Create bug-report-02-usecases.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Create documentation-improvement-02-usecases.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update documentation-improvement-01-tutorials.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Create help-needed.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update bug-report-02-usecases.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update pull_request_template.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update pull_request_template.md

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

---------

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-26 11:49:55 -04:00
rameshv29
034f2c3584
fix(02-use-cases): Enhanced database queries and removed sensitive information from config files, use SSM Parameter Store (#293)
* enhanced the database analysis functionalities and updated the database setup not to store secret name in config

* Security fix: Remove sensitive data from config files, use SSM Parameter Store

* cleanup files
2025-08-26 10:25:01 -04:00
Kamal Manchanda
34d97822af
fix(02-use-cases): Removed client secret from env file and some cleanup to remove files which are not used (#294) 2025-08-26 10:22:13 -04:00
dependabot[bot]
443c29a637
fix(02-use-cases): build(deps): Bump python-multipart (#250)
Bumps [python-multipart](https://github.com/Kludex/python-multipart) from 0.0.6 to 0.0.18.
- [Release notes](https://github.com/Kludex/python-multipart/releases)
- [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Kludex/python-multipart/compare/0.0.6...0.0.18)

---
updated-dependencies:
- dependency-name: python-multipart
  dependency-version: 0.0.18
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-25 17:09:41 -04:00
Eashan Kaushik
ade95b51ca
fix(02-use-cases): Update create-gateway.py (#291)
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-25 16:43:30 -04:00
Eashan Kaushik
d9f9dffdf8
fix(agentcore-samples): fix for code scanning: Clear-text logging of sensitive information (#286)
* Potential fix for code scanning

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 65: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update setup_database_access.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 41: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 40: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update setup_cognito.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 39: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update retrieve_api_key.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 34: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 33: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 32: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update oauth_test.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 29: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update get_customer_profile.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 28: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update deploy_agent_runtime.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 25: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update credentials_manager.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 18: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update create-gateway.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 15: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update config.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 14: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update cognito_oauth_setup.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 13: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update auth.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Potential fix for code scanning alert no. 9: Clear-text logging of sensitive information

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update deploy_agent_runtime.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update retrieve_api_key.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update retrieve_api_key.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update deploy_agent_runtime.py

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

---------

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-08-25 16:09:11 -04:00
dependabot[bot]
d5712f3d3d
fix(02-use-cases): build(deps): Bump python-jose (#251)
Bumps [python-jose](https://github.com/mpdavis/python-jose) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/mpdavis/python-jose/releases)
- [Changelog](https://github.com/mpdavis/python-jose/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mpdavis/python-jose/compare/3.3.0...3.4.0)

---
updated-dependencies:
- dependency-name: python-jose
  dependency-version: 3.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-25 16:03:11 -04:00
dependabot[bot]
8d509c3066
fix(02-use-cases): build(deps): Bump jinja2 (#252)
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.2 to 3.1.6.
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/jinja/compare/3.1.2...3.1.6)

---
updated-dependencies:
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-25 16:02:55 -04:00
dependabot[bot]
235ae36051
fix(02-use-cases): build(deps): Bump starlette (#183)
Bumps [starlette](https://github.com/encode/starlette) from 0.47.1 to 0.47.2.
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](https://github.com/encode/starlette/compare/0.47.1...0.47.2)

---
updated-dependencies:
- dependency-name: starlette
  dependency-version: 0.47.2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-25 16:02:16 -04:00
Jason Perry
de3aa84921
Fix(01-AgentCore-runtime): avoid duplicate final output in Strands+Bedrock notebook (#290) 2025-08-25 16:01:04 -04:00
Eqbal Murad
821340657a
fix(02-use-cases): Update .dockerignore to include Dockerfile in codebuild project (#263)
Signed-off-by: Eqbal Murad <eqbal.m@gmail.com>
2025-08-25 15:17:53 -04:00
David L.
1e971cc855
feat(agentcore-samples): Create CONTRIBUTORS.md (#125)
* Create CONTRIBUTORS.md

Signed-off-by: David L. <32494274+architec@users.noreply.github.com>

* Create CONTRIBUTORS.md and add all contributors

Signed-off-by: David L. <32494274+architec@users.noreply.github.com>

---------

Signed-off-by: David L. <32494274+architec@users.noreply.github.com>
2025-08-25 14:49:23 -04:00
Eashan Kaushik
72662f73ef
feat(Add CodeQL code scanning): Adding codeql.yml workflow(#285)
Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-25 14:44:21 -04:00
JuliaHu
a48b6d9bd3
fix(02-use-cases): New end to end user case: farm management example pull request (#234)
* Add a new Farm management use case to 02-use-cases

* feat:modify readme

* feat:modify solution diagram

* feat:modify cleanup

* remove datastore

* remove all datastore

* remove unnecessary files

* modify file structure

* remove ds_store
2025-08-25 14:13:38 -04:00
Eashan Kaushik
33bb9e8de1
feat(Labeler): Add Labeler automation (#287)
* Create label.yml

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Create labeler.yml

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update labeler.yml

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

* Update labeler.yml

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>

---------

Signed-off-by: Eashan Kaushik <50113394+EashanKaushik@users.noreply.github.com>
2025-08-25 13:57:31 -04:00
Liam
492ea5c0df
fix module error because utils is imported before the path hack (#280)
Signed-off-by: Liam <101819487+liwadman@users.noreply.github.com>
2025-08-22 08:30:35 -05:00
mvangara10
ed640c243c
fix(01-tutorials): CodeQL: Security fix for Gateway (#278)
* AgentCore Observability

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* .env.example

* add runtime utils.py

Signed-off-by: mvangara10 <mvangara@amazon.com>

* AgentCore Observability: Custom Spans

* Update doc

* runtime hosted agent update

* Refactoring and Runtime updates

* Custom span documentation

* Observability runtime: auto_create_role

* Model ID and STM fix

* Model ID update

* Non runtime: strands package update and fix

* DDGS and ModelID upddates

* Claude 3.5 -> 3.7

* CodeQL fix

---------

Signed-off-by: mvangara10 <mvangara@amazon.com>
2025-08-21 15:47:56 -04:00
Sundar Raghavan
49547d7c85
Fix security issues identified by CodeQL scan (#277)
- Fixed socket binding to use 127.0.0.1 instead of all interfaces
- Improved error handling to prevent stack trace exposure
- Additional security improvements
2025-08-21 12:35:13 -04:00
Godwin Vincent
1b6c689c6a
Device management agent - • Upgrading from the vulnerable version 3.3.0 to the patched version 3.4.0 (#274)
* updated README.md file with bearer token generation

* updated README.md file with bearer token generation-removed client id and secret credentials

* removed hardcoded domain

* added agent runtime, frontend, observability and agentcore identity

* update README.md file to reflect frontend testing

* fixed Client-side cross-site scripting and DOM text reinterpreted as HTML

* fixed Client-side cross-site scripting and DOM text reinterpreted as HTML

* • Upgrading from the vulnerable version 3.3.0 to the patched version 3.4.0
• Fixing the algorithm confusion vulnerability with OpenSSH ECDSA keys (similar to CVE-2022-29217)
• Resolving the 2 Dependabot alerts mentioned in the pull request
2025-08-21 10:02:57 -04:00
Akarsha Sehwag
fee1b77007
Tutorial E2E: updates (#269)
* minor typo update

* fix(memory): update memory retrieval snippets

* feat(memory)update lab 2

* fix(utils): update print statement
2025-08-20 15:56:37 -04:00
Godwin Vincent
0c0d7b2f17
Device management agent - fixed Client-side cross-site scripting and DOM text reinterpreted as HTML #92 and #93 (#268)
* updated README.md file with bearer token generation

* updated README.md file with bearer token generation-removed client id and secret credentials

* removed hardcoded domain

* added agent runtime, frontend, observability and agentcore identity

* update README.md file to reflect frontend testing

* fixed Client-side cross-site scripting and DOM text reinterpreted as HTML

* fixed Client-side cross-site scripting and DOM text reinterpreted as HTML
2025-08-20 14:30:20 -04:00
Tejas Dastane
e088a12491
Set baseline mcp client version to 1.9.0 (#267)
Notes:
- AgentCore Gateway today only supports MCP Protocol version 2025-03-26.
- MCP protocol version support only starts after mcp>=1.9.0 so adding it as a requirement.

Testing:
- Created new venv and installed all requirements according to requirements.txt
- Started the MCP S3 agentcore gateway notebook and it was able to run successfully.

Co-authored-by: Tejas Dastane <tdastan@amazon.com>
2025-08-20 11:21:43 -07:00
mvangara10
2250878687
AgentCore memory: Model ID update (#265)
* AgentCore Observability

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* Update README.md

Signed-off-by: mvangara10 <mvangara@amazon.com>

* .env.example

* add runtime utils.py

Signed-off-by: mvangara10 <mvangara@amazon.com>

* AgentCore Observability: Custom Spans

* Update doc

* runtime hosted agent update

* Refactoring and Runtime updates

* Custom span documentation

* Observability runtime: auto_create_role

* Model ID and STM fix

* Model ID update

* Non runtime: strands package update and fix

* DDGS and ModelID upddates

* Claude 3.5 -> 3.7

---------

Signed-off-by: mvangara10 <mvangara@amazon.com>
2025-08-18 11:41:14 -04:00
satveerkhurpa
9e1bef4bd0
fix(01-tutorials): Updated README for AgentCore identity(#264)
Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-18 11:28:25 -04:00
rahullks
3351a6de99
Update run-commands-using-code-interpreter.ipynb (#259)
mask account id in the policy

Signed-off-by: rahullks <rahullks@gmail.com>
2025-08-15 11:46:27 -07:00
satveerkhurpa
e140a1d5f3
Updated additional permissions (#258)
Co-authored-by: Satveer Khurpa <khurpas@amazon.com>
2025-08-15 13:22:25 -04:00
Liam
ed9345c1f0
removing wildcard getsecretvalue (#257)
namespacing it to getsecretvalue

Signed-off-by: Liam <101819487+liwadman@users.noreply.github.com>
2025-08-15 12:06:07 -05:00
Akarsha Sehwag
523a9cb49e
fix: region update for E2E workshop (#256)
* fix: region update

* update default region
2025-08-15 09:51:25 -04:00
Maira Ladeira Tanke
c573bae4b1
Adding readme to end-to-end tutorial (#255)
* Adding readme to end-to-end tutorial

* Adding opentelemetry requirements to end-to-end workshop
2025-08-14 23:25:36 -04:00
Akarsha Sehwag
ce1e2d8367
Add Workshop E2E (#253)
* feat: e2e tutorial lab5

* docs: Add README.md for 05-AgentCore Observability lab

* feat: Add Lab 6 of E2E tutorial

* fix: Fix Agent ECR repository typo

* docs: Update Lab 6 Guidelines

* feat: cleanup guardrails

* docs: fix step name

* added lab4

* Add Lab 3 Identity Notebook and README

* added memory and updated lab 1

* pushing all of the helper files from original use case. Remove as needed

* feat: update lab1 helper file

* chore: restructure utils

* feat: update memory helper

* chore: restructure identity

* chore: append to agent definition from the helper

* Renamed agentcore identity to lab6

* Renamed Gateway notebook to Lab 3 and reviewed with fixes

* Fixed typo in delete_memory

* Lab 1: review and minor fixes

* Lab 1: cleanup

* Lab 2: refactored

* fix: change model to Claude 3.7

* added TODOs

* updated lab1 notebook

* update runtime intro

* refactor utils file

* minor_update to memory

* memory return client

* revert change.

* feat: update runtime lab

* feat: add helper for bedrock guardrails

* fix: fix typos

* docs: minor update

* update lab1 tools

* update memory

* update - runtime

* updated lab3 + lambda

* removed outputs

* changed sh

* removed zip

* added one missing piece

* chore: rm observability old lab

* Updates to Lab6 Identity

* Updates to Lab6 Identity

* updated arch. diagram

* update docs lab1

* rename-lab-5-6

* update arch doc

* lab 03

* fixed lab 3 docs

* Fix Lab 4

* Lab 7 frontend

* Fix lab7

* Fix prereq issues and update gitignore

* adding lab 3 tool removal

* removed checkpoints

* merged

* chore: Update Lab 4 documentation

* fix: Update AgentCore IAM Role to access memory

* Lab 7 fixed invoke to runtime

* minor changes

* removed guardrails + minor edits

* Deleting files and folders.

* Rename, Refactor and deletion

Added sagemaker_helper

* fixing Client

* Removing guardrails code

* remove unused arch

* remove unused files

* updating lab01

* remove policies

* updating lab02

* docs: Update lab 4 markdown

* chore: Update Lab 4

* update cleanup

* cleaning up DS_Store files

* frontend

* updates to lab1 notebook

* updating architectures

* Lab5: fixed response formatting in streamlit app

* updating lab3

* updated lab3

* Lab 5 and Lab 6 and Helper Scripts Updates

Lab 5: Added the architecture diagram
Lab 6: Updated the notebook
Utils: Added helper functions
Sagemaker_helper: Cosmetic Updates

* Updating lab 4

* removing clean up from lab 3

* added lab3 changes

* Streamlit Fixes, Cosmetic Updates, Notebook Updates

* add maira's changes

* update lab2+3

* minor updates

* sync labs

* fix runtime docs

* refactoring end-to-end tutorials

* remove guardrail ss

---------

Co-authored-by: Aleksei Iancheruk <aianch@amazon.fr>
Co-authored-by: EugeneSel <youdjin.sel15@gmail.com>
Co-authored-by: Aidan Ricci <riaidan@amazon.com>
Co-authored-by: Achintya <pinnintiachintya@gmail.com>
Co-authored-by: naresh rajaram <nareshrd@amazon.com>
Co-authored-by: Lorenzo Micheli <lorenzo.micheli@gmail.com>
Co-authored-by: Achintya <apinnint@amazon.com>
Co-authored-by: HT <hardikvt@amazon.com>
Co-authored-by: HT <hardik.thakkar00@gmail.com>
Co-authored-by: Maira Ladeira Tanke <mttanke@amazon.com>
2025-08-14 22:52:33 -04:00