Back to All Checks
High BedrockAgentCore Regional

Bedrock AgentCore custom browsers should not use public network mode

Description

Flags Amazon Bedrock AgentCore custom browsers configured with PUBLIC network mode. Public browsers reach the internet directly and bypass VPC controls.

Remediation

Recreate AgentCore custom browsers with a VPC network configuration so browser traffic stays inside your network.

Steps

  1. Open the Amazon Bedrock AgentCore console and go to Browsers.
  2. Create a new custom browser (the network mode is set at creation time).
  3. Under Network configuration, choose VPC.
  4. Select the subnets and security groups for the browser.
  5. Migrate workloads to the new browser and delete the public one.
Start Your Free Security Check