AgentCore#

AWS Bedrock AgentCore provides cloud browser sessions with SigV4 authentication. Use it when running agent-browser in AWS environments or when you need managed cloud browsers backed by AWS infrastructure.

Setup#

Credentials are automatically resolved from:

Environment variables (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY)
AWS CLI (aws configure export-credentials) which supports SSO, profiles, IAM roles, etc.

agent-browser -p agentcore open https://example.com

Or use environment variables for CI/scripts:

export AGENT_BROWSER_PROVIDER=agentcore
agent-browser open https://example.com

The -p flag takes precedence over AGENT_BROWSER_PROVIDER.

Configuration#

Variable	Description	Default
`AGENTCORE_REGION`	AWS region for the AgentCore endpoint	`us-east-1`
`AGENTCORE_BROWSER_ID`	Browser identifier	`aws.browser.v1`
`AGENTCORE_PROFILE_ID`	Browser profile for persistent state (cookies, localStorage)	(none)
`AGENTCORE_SESSION_TIMEOUT`	Session timeout in seconds	`3600`
`AWS_PROFILE`	AWS CLI profile for credential resolution	`default`
`AWS_ACCESS_KEY_ID`	AWS access key (checked before AWS CLI fallback)	(none)
`AWS_SECRET_ACCESS_KEY`	AWS secret key	(none)
`AWS_SESSION_TOKEN`	Temporary session token (for STS/SSO credentials)	(none)

Browser Profiles#

Use AGENTCORE_PROFILE_ID to persist browser state (cookies, localStorage) across sessions:

AGENTCORE_PROFILE_ID=my-profile agent-browser -p agentcore open https://example.com

When a profile is set, AgentCore stores and restores browser state automatically between sessions.

Live View#

When a session starts, AgentCore prints a Live View URL to stderr:

Session: abc123-def456
Live View: https://us-east-1.console.aws.amazon.com/bedrock-agentcore/browser/aws.browser.v1/session/abc123-def456#

Open this URL in your browser to watch the agent session in real time from the AWS Console.

Credential Resolution#

AgentCore uses lightweight manual SigV4 signing (no AWS SDK dependency). Credentials are resolved in order:

Environment variables (AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY, optionally AWS_SESSION_TOKEN)
AWS CLI (aws configure export-credentials --format env), which supports SSO, IAM roles, credential files, and profiles

If using SSO, run aws sso login before launching agent-browser. Set AWS_PROFILE to select a specific named profile.

Example#

# Basic usage (credentials auto-resolved via AWS CLI)
agent-browser -p agentcore open https://example.com

# With a browser profile for persistent login state
AGENTCORE_PROFILE_ID=my-profile agent-browser -p agentcore open https://x.com/home

# With explicit region
AGENTCORE_REGION=eu-west-1 agent-browser -p agentcore open https://example.com

# With SSO profile
AWS_PROFILE=my-sso-profile agent-browser -p agentcore open https://example.com

When enabled, agent-browser connects to an AgentCore cloud browser session instead of launching a local browser. All commands work identically.