How Eon built multi-cloud investigation with an MCP Gateway on Amazon Bedrock AgentCore
aws ·
Eon, an independent software vendor, replaced fragmented credential management and local Model Context Protocol (MCP) servers with a centralized Amazon Bedrock AgentCore MCP Gateway. This architecture unifies access to investigation tools across AWS, GCP, and Azure for both human developers and autonomous AI agents. By leveraging Cedar-based authorization policies, Eon enforces strict least-privilege access, separating read operations for humans from specific write permissions for agents. The solution eliminates the need for complex cross-account networking like VPC peering, relying instead on IAM role assumption for secure connectivity. As a result, developer onboarding time dropped significantly from two days to just two minutes by removing the need for per-tool configuration. The system now supports over 100 engineers and processes approximately 10,000 sessions through a single authenticated URL. Eon also implemented hybrid policy modes to manage large tool catalogs while maintaining semantic search capabilities where needed.
aws