View a markdown version of this page

Call AgentCore Web Search through Amazon PrivateLink - Amazon Bedrock AgentCore
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Call AgentCore Web Search through Amazon PrivateLink

You can call the InvokeWebSearch API from your virtual private cloud (VPC) without going through the internet. To do so, create an interface VPC endpoint for the Amazon Bedrock AgentCore data plane service, com.amazonaws.region.bedrock-agentcore. If you enable private DNS for the endpoint, the Amazon SDKs and the Amazon Command Line Interface (Amazon CLI) reach the API through the endpoint without any change to your code.

If you attach an endpoint policy to the interface endpoint, the policy applies to InvokeWebSearch requests in addition to your Amazon Identity and Access Management (IAM) policies. For more information about interface endpoints for Amazon Bedrock AgentCore, see Use Amazon PrivateLink to create a private connection.