AgentCore Gateway supports private TLS certificates for VPC endpoints
Amazon Bedrock AgentCore Gateway now accepts TLS certificates signed by private certificate authorities on MCP, OpenAPI and HTTP proxy targets. The gateway fetches a PEM-encoded CA certificate from Amazon S3 or AWS Secrets Manager and uses it as the trust anchor for outbound TLS. The feature is available in all Regions where AgentCore Gateway and Amazon VPC Lattice are both available.
What changes for platform teams
Teams can connect agents through AgentCore Gateway to private endpoints in their VPC without placing an Application Load Balancer in front of them solely for TLS. Teams with internal CAs will need to store the CA certificate in S3 or Secrets Manager and make the targets reachable through VPC Lattice.
Read the original at What's New with AWS ↗
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules