AWS tutorial: automating MCP Agent Registry sync with CloudTrail and Lambda
AWS ML Blog · rss · 2026-11-12
An AWS ML Blog tutorial tackles stale AWS Agent Registry records when MCP servers (Bedrock AgentCore) gain new tools or schema updates, with an event-driven push-sync architecture:
- Trigger: updating an MCP server calls UpdateAgentRuntime; CloudTrail captures it as a management event (5-15 min delivery delay)
- Route: an EventBridge rule matches aws.bedrock-agentcore CloudTrail events, forwarding cross-account to a central event bus in Account A
- Sync: a Lambda parses the runtime ARN, builds the MCP invocation URL, obtains an OAuth bearer token via AgentCore Identity (no secrets in env vars), calls initialize + tools/list, diffs against the registry, and updates if changed
Supports single- and multi-account setups; includes the EventBridge rule JSON and Python snippets for ARN parsing and auth, extensible to many MCP server accounts.
More from coding & agent
- Grok agent autonomously browses, orders and pays for a book on an unfamiliar site — xkonjin · 2026-11-12
- AWS ships Emulator: local AWS test environments for coding agents, built by agents — HanchungLee · 2026-11-12
- Stop Managing Sandbox Fleets for Cloud Agents, Argues gakonst: Go Harness-First — andreisavu · 2026-11-12
- Claude Opus 5.5 hunted down 360 bugs in Mediabunny, catching every user-reported one early — Vjeux · 2026-11-12
- Mediabunny bug hunt nears end: 354 accepted changes, huge robustness gains — Vjeux · 2026-11-12
- Sentry CEO: Opus 5.5 Is a 'Step Function Change' for Coding — Switch If You Can Afford It — zeeg · 2026-11-12