Amazon Bedrock AgentCore
Arpio replicates AgentCore Runtimes, Memories, and all supporting resources to ensure that agentic workloads are fully restorable in case of disaster.
Bedrock AgentCore Runtime
Arpio replicates AgentCore Runtimes along with their code, identities, credential providers, VPC settings, and environment variables.
The following attributes are translated during replication:
|
Attribute |
Translation |
|---|---|
|
IAM Execution Role |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
VPC Subnets |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
VPC Security Groups |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
Container Image (ECR) |
Translated to corresponding ECR repository that Arpio manages in the recovery environment |
|
Code S3 Bucket |
Translated to corresponding S3 bucket that Arpio manages in the recovery environment for runtimes that load code from S3 |
|
Workload Identities |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
Environment Variables |
Environment variables that reference the ARN or hostname of other resources (secrets, RDS databases, etc.) that Arpio is replicating will be translated to reference the corresponding resource(s) in the recovery environment. |
The following resources are automatically selected into recovery points when a Bedrock AgentCore Runtime is selected:
- The IAM Execution Role used by the runtime
- The VPC Subnets referenced by the runtime's network configuration
- The VPC Security Groups referenced by the runtime's network configuration
- The ECR Repository hosting the runtime's container image
- The S3 Bucket hosting the runtime's code, when the runtime loads code from S3
- Any Workload Identities referenced by the runtime's authorization configuration
- All child Bedrock AgentCore Runtime Endpoints
- Other resources (memories, databases, etc. that are referenced within the runtime’s environment variables
Bedrock AgentCore Runtime Endpoint
The following attributes are translated during replication:
|
Attribute |
Translation |
|---|---|
|
Runtime |
Translated to the corresponding Bedrock AgentCore Runtime that Arpio manages in the recovery environment |
The following resources are automatically selected into recovery points when a Bedrock AgentCore Runtime Endpoint is selected:
- The parent Bedrock AgentCore Runtime
Bedrock AgentCore Memory
In addition to the memory resource configuration, Arpio replicates the memory records that the memory's strategies have extracted, so the recovered memory comes up with the same long-term records as the source. Short-term raw events are not replicated.
To keep memory records continuously in sync, Arpio configures Kinesis streaming on the source memory itself when the memory is first protected. Arpio provisions the Kinesis stream and the supporting infrastructure in the source account, attaches it to the memory, and replicates every memory record change to the recovery environment in real time. No configuration on the customer's side is required.
If the customer has already configured Kinesis stream delivery on the memory for their own purposes, Arpio cannot attach its own stream — AgentCore Memory only supports a single stream delivery target. In that case, Arpio surfaces a recovery point issue identifying the memory, and the customer must remove their existing stream delivery configuration (or contact support) before Arpio can replicate that memory.
The following attributes are translated during replication:
|
Attribute |
Translation |
|---|---|
|
IAM Execution Role |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
KMS Key |
If using encryption at rest, Arpio creates a new KMS key in the recovery environment that it uses to encrypt the memory's data |
The following resources are automatically selected into recovery points when a Bedrock AgentCore Memory is selected:
- The IAM Execution Role used by the memory
- The KMS Key used to encrypt the memory, when encryption at rest is enabled
Bedrock AgentCore Gateway
The following attributes are translated during replication:
|
Attribute |
Translation |
|---|---|
|
IAM Role |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
KMS Key |
If using encryption at rest, Arpio creates a new KMS key in the recovery environment that it uses to encrypt the gateway's configuration |
|
Policy Engine |
Translated to the corresponding Bedrock AgentCore Policy Engine that Arpio manages in the recovery environment, when the gateway has a Policy Engine attached |
The following resources are automatically selected into recovery points when a Bedrock AgentCore Gateway is selected:
- The IAM Role used by the gateway
- The KMS Key used to encrypt the gateway, when encryption at rest is enabled
- The Bedrock AgentCore Policy Engine attached to the gateway, when configured
- Any Bedrock AgentCore Gateway Targets that belong to the gateway
Bedrock AgentCore Gateway Target
The following attributes are translated during replication:
|
Attribute |
Translation |
|---|---|
|
Gateway |
Translated to the corresponding Bedrock AgentCore Gateway that Arpio manages in the recovery environment |
|
Credential Providers |
Translated to corresponding OAuth2 or API Key Credential Providers that Arpio manages in the recovery environment |
|
MCP Lambda Targets |
Translated to the corresponding Lambda function that Arpio manages in the recovery environment, for targets that invoke a Lambda function |
|
HTTP Targets |
HTTP Gateway Targets backed by an Agentcore Runtime are translated to the corresponding Agentcore Runtime in the recovery environment |
The following resources are automatically selected into recovery points when a Bedrock AgentCore Gateway Target is selected:
- The parent Bedrock AgentCore Gateway
- Any Bedrock AgentCore OAuth2 or API Key Credential Providers referenced by the target
- The Lambda function targeted by the gateway target, for MCP Lambda targets
- Agentcore Runtimes that are targeted by HTTP gateway targets
After all gateway targets are restored, Arpio triggers AgentCore's gateway target synchronization so the gateway's tool catalog is regenerated against the recovered targets.
Bedrock AgentCore Workload Identity
Arpio replicates Bedrock AgentCore Workload Identities to the recovery environment.
No fields require translation during replication.
Bedrock AgentCore OAuth2 Credential Provider
Arpio replicates Bedrock AgentCore OAuth2 Credential Providers to the recovery environment, including the provider configuration and the OAuth2 client secret that AgentCore stores on the provider's behalf.
The OAuth2 client secret value is captured as an encrypted backup artifact and used to recreate the provider's secret in the recovery environment.
No fields require translation during replication.
Bedrock AgentCore API Key Credential Provider
Arpio replicates Bedrock AgentCore API Key Credential Providers to the recovery environment, including the provider configuration and the API key that AgentCore stores on the provider's behalf.
The API key value is captured as an encrypted backup artifact and used to recreate the provider's secret in the recovery environment.
No fields require translation during replication.
Bedrock AgentCore Policy Engine
The following attributes are translated during replication:
|
Attribute |
Translation |
|---|---|
|
KMS Key |
If using encryption at rest, Arpio creates a new KMS key in the recovery environment that it uses to encrypt the policy engine's configuration |
The following resources are automatically selected into recovery points when a Bedrock AgentCore Policy Engine is selected:
- The KMS Key used to encrypt the policy engine, when encryption at rest is enabled
- Any Bedrock AgentCore Policies that belong to the policy engine
Bedrock AgentCore Policy
Arpio replicates Bedrock AgentCore Policies to the recovery environment, including their Cedar policy text.
The following attributes are translated during replication:
|
Attribute |
Translation |
|---|---|
|
Policy Engine |
Translated to the corresponding Bedrock AgentCore Policy Engine that Arpio manages in the recovery environment |
The following resources are automatically selected into recovery points when a Bedrock AgentCore Policy is selected:
- The parent Bedrock AgentCore Policy Engine
Bedrock AgentCore Browser
The following attributes are translated during replication:
|
Attribute |
Translation |
|---|---|
|
IAM Execution Role |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
VPC Subnets |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
VPC Security Groups |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
Recording S3 Bucket |
Translated to the corresponding S3 bucket that Arpio manages in the recovery environment, when recording is enabled |
The following resources are automatically selected into recovery points when a Bedrock AgentCore Browser is selected:
- The IAM Execution Role used by the browser
- The VPC Subnets referenced by the browser's network configuration
- The VPC Security Groups referenced by the browser's network configuration
- The S3 Bucket used for session recording, when recording is enabled
Bedrock AgentCore Code Interpreter
The following attributes are translated during replication:
|
Attribute |
Translation |
|---|---|
|
IAM Execution Role |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
VPC Subnets |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
VPC Security Groups |
Translated to corresponding entities that Arpio manages in the recovery environment |
The following resources are automatically selected into recovery points when a Bedrock AgentCore Code Interpreter is selected:
- The IAM Execution Role used by the code interpreter
- The VPC Subnets referenced by the code interpreter's network configuration
- The VPC Security Groups referenced by the code interpreter's network configuration
Bedrock AgentCore Evaluator
Arpio replicates customer-defined Bedrock AgentCore Evaluators to the recovery environment. Built-in evaluators exist identically in every region and are not replicated.
No fields require translation during replication.
Bedrock AgentCore Online Evaluation Config
The following attributes are translated during replication:
|
Attribute |
Translation |
|---|---|
|
Evaluation Execution Role |
Translated to corresponding entities that Arpio manages in the recovery environment |
|
Evaluators |
Translated to the corresponding Bedrock AgentCore Evaluators that Arpio manages in the recovery environment |
The following resources are automatically selected into recovery points when a Bedrock AgentCore Online Evaluation Config is selected:
- The IAM Evaluation Execution Role used by the configuration
- Any Bedrock AgentCore Evaluators referenced by the configuration