View a markdown version of this page

Runtime Instances and capacity providers - Amazon Bedrock AgentCore
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Runtime Instances and capacity providers

The Instances compute type runs your agents on Amazon managed Amazon EC2 infrastructure in your own Amazon account, provisioned through a capacity provider. Because these instances run in your account, the security and encryption model differs from the serverless microVM compute type. The following topics describe the parts of that model:

  • The shared responsibility between you and AgentCore

  • The Amazon Identity and Access Management (IAM) roles involved

  • Multi-tenant session isolation

  • How the Amazon EC2 resources are encrypted at rest

  • How you manage the data that Instances stores in your account

For a broader overview of the Instances compute type and how to use it, see Instances and Get started with Instances.

Topics