How AgentFlo built AI sales agents with Amazon Bedrock AgentCore – Part 2

Summary

AgentFlo designed an architecture using Amazon Bedrock AgentCore and AWS serverless infrastructure to address traffic spikes and build trust in autonomous commerce agents. Security operates across three stages: AWS Fargate filters prompt injections and opt-outs, AgentCore Gateway enforces deterministic Cedar authorization policies during tool execution, and post-turn privacy filters screen outputs. Session isolation is maintained across merchants through AgentCore runtime microVMs, while AgentCore Observability and Amazon CloudWatch provide end-to-end tracing. Data reliability and long conversation journeys rely on Amazon DynamoDB context storage, Amazon Bedrock Knowledge Bases, and Amazon S3 Vector embeddings. Early deployment data showed a 12 percent net revenue uplift.

Takeaways

1. 1

   Deterministic Cedar policies at the AgentCore Gateway enforce business rules like discount limits independently of model reasoning.

2. 2

   AgentCore runtime microVMs provide complete session isolation between merchant agent interactions.

3. 3

   Pre-turn AWS Fargate filters, mid-turn AgentCore Gateway policies, and post-turn output filters combine to form a three-layer security model.