The safeguards map / 3.3 Gateways

Amazon Bedrock AgentCore Gateway

Amazon Web Services (company). Vendor, generally available. proprietary. Listed; as of .

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

A managed AWS gateway that turns APIs and Lambda functions into Model Context Protocol (MCP) tools, fronts agent-to-agent traffic and routes model requests through one endpoint.

Where it sits

3.3 Gateways (primary): Sits between agents and their tools, other agents and model providers, converting services into MCP tools, passing agent-to-agent traffic through, and authenticating callers at ingress and egress.

Amazon Bedrock AgentCore Gateway is a fully managed AI gateway that provides a single, secure entry point for agentic traffic

captured

fronts other agents and HTTP services through passthrough targets (including Agent-to-Agent (A2A) traffic)

captured

converts APIs, Lambda functions, and existing services into Model Context Protocol (MCP)-compatible tools

captured

routes inference requests across multiple model providers through a unified, model-based routing endpoint

captured

is the only solution that provides both comprehensive ingress authentication and egress authentication in a fully managed service

captured

Facts

Concern
security
Names the law
no
Subject
agentAI system
Used by
those who run it
Runs
at runtime
Policy comes from
owner-entered settings
Traffic it sees
model callstool calls (MCP)agent to agent (A2A)
Can the agent bypass it
depends

Handoffs

None recorded.

Listed, not drawn: no documented handoff and no foundation home places it on the map.

Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.