<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Bedrock on ZX Cloud Security</title><link>https://zxcloudsecurity.co.uk/tags/bedrock/</link><description>Recent content in Bedrock on ZX Cloud Security</description><generator>Hugo</generator><language>en-GB</language><lastBuildDate>Wed, 03 Jun 2026 20:00:00 +0000</lastBuildDate><atom:link href="https://zxcloudsecurity.co.uk/tags/bedrock/index.xml" rel="self" type="application/rss+xml"/><item><title>AWS Step Functions Adds AI Agent Steps via AgentCore</title><link>https://zxcloudsecurity.co.uk/posts/aws-step-functions-bedrock-agentcore-agentic-reasoning-integration/</link><pubDate>Wed, 03 Jun 2026 20:00:00 +0000</pubDate><guid>https://zxcloudsecurity.co.uk/posts/aws-step-functions-bedrock-agentcore-agentic-reasoning-integration/</guid><description>AWS Step Functions integrates with Amazon Bedrock AgentCore to add AI reasoning steps in workflows. Key security considerations for architects around IAM a</description><content:encoded><![CDATA[<p>🟢 <strong>Low</strong>  |  <strong>Source:</strong> <a href="https://aws.amazon.com/about-aws/whats-new/2026/06/aws-step-functions-agentcore/">AWS What&rsquo;s New</a></p>
<hr>
<p>AWS Step Functions now integrates with Amazon Bedrock AgentCore (currently in preview) to allow AI agent reasoning steps within automated workflows. This enables teams to embed LLM-based tasks such as document classification and data extraction directly into orchestrated pipelines, with parallel execution and human approval gates. Audit trails are available via CloudWatch, capturing agent inputs, outputs, and token usage.</p>
<blockquote>
<p><strong>Architect&rsquo;s Take:</strong> Review IAM permissions granted to Step Functions execution roles that invoke AgentCore harnesses — ensure least-privilege policies are applied, particularly around model invocation and tool access. Treat human approval steps as a mandatory control for any agentic action with write or destructive scope, and validate that CloudWatch audit logging is enabled before promoting any AgentCore-integrated workflow to production.</p>
</blockquote>
<p><strong>Original advisory:</strong> <a href="https://aws.amazon.com/about-aws/whats-new/2026/06/aws-step-functions-agentcore/">AWS Step Functions adds AgentCore-powered agentic reasoning step</a></p>
]]></content:encoded></item></channel></rss>