# How AgentFlo built AI sales agents with Amazon Bedrock AgentCore – Part 2

[AWS](https://yomu.fyi/company/aws) · Muhammad Musab Iqbal · Aug 21, 2026

**Type:** Problem & solution

## Summary

AgentFlo designed an architecture using Amazon Bedrock AgentCore and AWS serverless infrastructure to address traffic spikes and build trust in autonomous commerce agents. Security operates across three stages: AWS Fargate filters prompt injections and opt-outs, AgentCore Gateway enforces deterministic Cedar authorization policies during tool execution, and post-turn privacy filters screen outputs. Session isolation is maintained across merchants through AgentCore runtime microVMs, while AgentCore Observability and Amazon CloudWatch provide end-to-end tracing. Data reliability and long conversation journeys rely on Amazon DynamoDB context storage, Amazon Bedrock Knowledge Bases, and Amazon S3 Vector embeddings. Early deployment data showed a 12 percent net revenue uplift.

## Context

Enterprise customers will not deploy autonomous commerce agents that expose sensitive data, hallucinate prices, offer unauthorized discounts, or forget context across extended multi-turn customer sales journeys.

## Approach / What changed

AgentFlo built a multi-layered defense and data foundation using AWS Fargate for ingress filtering, Amazon Bedrock AgentCore for microVM session isolation, deterministic Cedar policies at the AgentCore Gateway, and Amazon DynamoDB for stateful conversation context.

## Takeaways

- Deterministic Cedar policies at the AgentCore Gateway enforce business rules like discount limits independently of model reasoning.
- AgentCore runtime microVMs provide complete session isolation between merchant agent interactions.
- Pre-turn AWS Fargate filters, mid-turn AgentCore Gateway policies, and post-turn output filters combine to form a three-layer security model.

**Tags:** [Architecture](https://yomu.fyi/topic/architecture), [AWS](https://yomu.fyi/topic/aws), [LLMs](https://yomu.fyi/topic/llm), [Observability](https://yomu.fyi/topic/observability), [Serverless](https://yomu.fyi/topic/serverless)

[Read original post](https://aws.amazon.com/blogs/architecture/how-agentflo-built-ai-sales-agents-with-amazon-bedrock-agentcore-part-2)