All checks
Medium
Bedrock AgentCore custom browsers should have session recording enabled
Flags Amazon Bedrock AgentCore custom browsers without session recording to an S3 destination. Recording provides an audit trail of browser-tool activity.
- service
- BedrockAgentCore
- severity
- Medium
- scope
- evaluated in every region
How to fix it
Enable session recording on every AgentCore custom browser and point it at an S3 destination to retain an audit trail.
- Open the Amazon Bedrock AgentCore console and select the browser.
- Choose Edit and enable session recording.
- Set the S3 bucket (and optional prefix) for recording storage.
- Grant the AgentCore service principal write access to the bucket.
- Save the changes.
See which of your accounts this check is failing on.
Book a demo