Overview of Amazon Bedrock AgentCore Gateway

Amazon Bedrock AgentCore Gateway is a platform that enables the integration of Claude Desktop and Web Search. This integration allows Claude Desktop users to access a fully managed Web Search feature that runs only within the AWS infrastructure, avoiding the need for external API key management and query outsourcing.

(Reference: aws.amazon.com)

Architecture Details

AgentCore Gateway provides JWT-based inbound authentication leveraging AWS IAM Identity Center and Amazon Cognito. This design integrates with the company’s existing ID governance, allowing Claude Desktop to call Web Search through a trusted end-to-end authentication flow.

(Reference: aforementioned [aws.amazon.com])

Authentication Setup Procedure

To enable Web Search in Claude Desktop, it is necessary to connect to AgentCore Gateway through managed MCP servers. By setting up AWS IAM Identity Center as the authentication source, an integrated authentication flow is built with the company’s single sign-on (SSO) environment.

(Reference: aforementioned [aws.amazon.com])

Performance and Security Features

Web Search is compatible with the Model Context Protocol (MCP) and utilizes AWS’s vast web index of tens of billions of documents. All query traffic remains within the AWS infrastructure, employing a security design that prevents external data leakage.

(Reference: aforementioned [aws.amazon.com])

Summary

  • Securely build Claude Desktop’s Web Search connection using JWT authentication with AWS IAM Identity Center and Amazon Cognito
  • Achieve end-to-end authentication flow in a single sign-on environment integrated with the company’s existing ID governance
  • Avoid external API key management and data leakage risks with fully managed Web Search running only within the AWS infrastructure
  • Utilize a web index compatible with the Model Context Protocol (MCP) for real-time access to the latest information
  • Build an environment that meets compliance and security requirements with a design that keeps all query traffic within AWS