Connect Amazon Bedrock AgentCore to cross-account knowledge bases
aws ·
Amazon Bedrock AgentCore can connect agents to knowledge bases that reside in separate AWS accounts. The solution assumes a narrowly scoped IAM role in the knowledge base account to call RetrieveAndGenerate, avoiding the need to copy source data. Two generally available orchestration models are presented: a code-based Strands agent and a declarative AgentCore harness, which differ in who owns the agent loop and how the tool is hosted. The request flow starts with a user question processed by Amazon Nova Pro, which calls a tool that assumes the cross-account role and invokes RetrieveAndGenerate with Claude Haiku 4.5 against Amazon Redshift Serverless. The post recommends choosing the simplest sufficient pattern: native cross-account Retrieve, direct RetrieveAndGenerate, or an agent depending on whether tool selection, multi-step reasoning, or conversational state is required. Validation guidance includes using fresh sessions and bounded queries when comparing variants, and recommended practices cover logging, least-privilege roles, and Amazon Bedrock Guardrails.
aws