AI brokers are altering how organizations discover and act on info, however they share one structural limitation: their data is frozen at coaching time. Whenever you ask an agent that depends solely on its coaching information about at the moment’s inventory worth, a sports activities rating, or a launch that shipped an hour in the past, it may well’t reply.
Net Search on Amazon Bedrock AgentCore, now typically out there, addresses that hole. This totally managed, Mannequin Context Protocol (MCP)-compatible net search functionality lets your brokers get info from the net with out infrastructure overhead. It’s out there as a managed goal or connector that you just connect with your AgentCore Gateway. Brokers uncover it with a normal instruments/record name and invoke it like different MCP instruments. There are not any search APIs to provision, no outbound credentials to handle, and no result-parsing glue to keep up.
Behind that single connector sits a purpose-built net index maintained by Amazon, spanning tens of billions of paperwork. Amazon refreshes the index frequently, reflecting new content material inside minutes. The privateness mannequin makes certain that queries don’t go away AWS. Retrieval can mix a data graph with semantic snippet extraction tuned for mannequin context.
On this submit, we stroll by way of what makes Net Search on Amazon Bedrock AgentCore completely different, why it issues, and how you can wire it in with just a few strains of code.
Determine 1: Your utility connects to the AgentCore Gateway (AWS Id and Entry Administration (IAM) or JSON Net Token (JWT) inbound auth), which routes queries by way of a managed connector to the Net Search device within the AWS service account. Question site visitors stays inside AWS.
Grounding brokers within the net is the repair for stale data, nevertheless it’s additionally the place many groups get caught. Constructing it your self means:
Procuring a third-party search API and managing keys, quotas, and fee limits.
Parsing inconsistent consequence codecs throughout suppliers.
Reasoning about the place buyer queries journey and the way that information is likely to be retained or reused.
Constructing snippet extraction logic, so fashions get related passages, not uncooked HTML.
Sustaining freshness, protection, and high quality over time.
Every of those is a venture in itself. Net Search on Amazon Bedrock AgentCore addresses all of them.
A purpose-built net index
Many “add net search to your agent” options are wrappers round a third-party search engine. Net Search on Amazon Bedrock AgentCore is backed by an online index that Amazon operates straight, spanning tens of billions of paperwork. That scale issues for protection. For instance, the long-tail query a few area of interest library or an obscure product spec could be answered extra successfully when the index is broad slightly than restricted to the preferred pages.
Up to date frequently
Amazon refreshes the index on an ongoing foundation, reflecting new content material inside minutes. For brokers that reply to questions on worth actions or not too long ago printed bulletins, that recency window is the distinction between a grounded response and a confidently mistaken one. When your agent searches for “what occurred at the moment,” the outcomes mirror what really occurred at the moment.
Data graph for high-confidence info
Net Search on Amazon Bedrock AgentCore features a built-in data graph that grounds entities and their relationships. For factual questions (like who holds a task or when one thing was based), the data graph supplies high-confidence responses slightly than leaving the mannequin to deduce them from extracted web page textual content. This reduces the sort of delicate factual drift that creeps in when an agent stitches collectively a response from snippets alone.
Reasonably than handing the mannequin a uncooked HTML dump or a full web page and hoping it finds the related half, the device performs semantically related snippet extraction. It pulls the passages from every net web page that bear on the question, then returns them in a kind optimized for a mannequin’s context window. The mannequin sees the components that matter, with fewer tokens spent on boilerplate and navigation chrome. This may help enhance the precision of cited responses.
Personal by design
For a lot of enterprises, the query that stalls an online search rollout isn’t “does it work.” It’s “the place do my customers’ queries go, and what occurs to them?” Net Search on Amazon Bedrock AgentCore is constructed so the solutions to these questions are easy.
Queries don’t go away AWS
When your agent points a search, the question is served solely inside AWS infrastructure. Buyer queries don’t get despatched to a third-party search engine or go away AWS. The Gateway authenticates to the connector owned by AWS and routes the request internally, so the information path stays inside AWS finish to finish. For groups with data-residency or third-party egress issues, this removes a whole class of overview.
Walkthrough
To get began with the Net Search Device, you create an AgentCore Gateway (should you don’t wish to use an present one), add the net search device goal, and invoke it from an agent utilizing MCP.
Stipulations
To observe together with the setup steps on this submit, you want the next:
An AWS account with permissions to create IAM roles and Amazon Bedrock AgentCore assets.
The AWS Command Line Interface (AWS CLI) v2 put in and configured, or entry to the AWS Administration Console.
Python 3.10 or later (for the SDK and Strands examples).
The boto3 SDK up to date to the newest model.
An Amazon Bedrock AgentCore Gateway. You’ll be able to add the Net Search Device as a goal to an present Gateway, or create a brand new one. For directions on making a Gateway, see Create an Amazon Bedrock AgentCore gateway within the Developer Information.
Be aware: Following these steps creates AWS assets that incur prices. The Amazon Bedrock AgentCore Gateway and Net Search invocations are billable. See the Pricing part that follows for particulars, and keep in mind to wash up assets when completed to keep away from ongoing prices.
Setup
Including net search to an agent comes right down to attaching a Net Search Device goal to your Gateway utilizing connectorId: “web-search”. The Gateway snapshots the device schema, provisions the mixing, and handles schema administration, parameter governance, endpoint decision, and repair authentication for you.
Confirm that you just added the goal by calling describe_gateway_target or list_gateway_targets and confirming that Net Search-tool seems within the response.
The outbound function and permissions
Discover the previous credentialProviderConfigurations. That is the entire outbound-authorization story: as a substitute of you provisioning API keys or managing search credentials, the Gateway authenticates to the Net Search backend utilizing its personal IAM service function.
That function wants a belief coverage (so AgentCore can assume it, scoped to your account and Area) and a permissions coverage with two actions:
The InvokeWebSearch useful resource ARN is owned by AWS (account = aws). Authorization is enforced per invocation in opposition to that ARN, so granting bedrock-agentcore:InvokeWebSearch on it’s what lets the Gateway name net search in your behalf.
A few boundaries to maintain clear:
This function is for outbound auth solely (Gateway reaching the Net Search backend). Inbound auth (who can name your Gateway) is dealt with individually, sometimes with an OAuth or JWT authorizer equivalent to Amazon Cognito.
The function doesn’t embody bedrock:InvokeModel. Mannequin entry belongs to no matter identification runs your agent, to not the Gateway service function.
Invoking from MCP-compatible frameworks
As a result of Net Search is uncovered over MCP, an MCP-compatible framework like Strands, LangChain, LangGraph, CrewAI, or your personal can uncover and invoke it. The agent calls instruments/record, finds WebSearchTool, and makes use of it routinely every time it wants present info:
The agent determines it wants recent info, invokes WebSearchTool with an applicable question, and composes a grounded response with supply citations. No tool-specific code in your aspect.
Response format
Outcomes come again in the usual MCP instruments/name envelope. The device returns a single content material block of kind textual content that comprises a serialized JSON doc with the outcomes. Parse that internal textual content and also you get an id plus a outcomes array of observations:
Every net index remark (at all times returned) carries title, url, publishedDate, and textual content. Data-graph observations (non-obligatory, for entity queries) have null title and url plus structured key/worth info within the textual content discipline.
If it is advisable floor an agent in your personal enterprise information, Amazon Bedrock Data Bases and Amazon Bedrock Managed Data Bases are the best instruments. They ingest, index, and retrieve over content material you personal. The Net Search Device is the complement. It grounds brokers within the public net, for questions whose responses stay outdoors your group and alter by the minute. Many manufacturing brokers use each: a data base for “what do our paperwork say” and net seek for “what’s true on this planet proper now.”
Pricing
At $7 per 1,000 queries, you’ll be able to run a web-search agent for lower than a cent per query with a pay-as-you-go mannequin.
Clear up assets
When you created assets whereas following alongside, you’ll be able to take away them to keep away from ongoing prices:
Delete the Gateway goal: name delete_gateway_target along with your gatewayIdentifier and targetId.
If the Gateway was created solely for this walkthrough, delete it with delete_gateway.
There is no such thing as a persistent infrastructure on the AWS aspect past these assets. After they’re eliminated, you cease incurring prices.
Conclusion
The Amazon Bedrock AgentCore Net Search Device offers your brokers present net data by way of a single connectorId. There are not any search APIs to provision and no result-parsing to keep up. Beneath that simplicity is an online index that AWS builds itself (tens of billions of paperwork, refreshed inside minutes), a privateness mannequin the place queries don’t go away AWS, and retrieval that may mix a data graph with semantic snippet extraction tuned for mannequin context. The result’s an agent that responds to well timed questions precisely, cites its sources, and retains your information the place it belongs.
As a result of Amazon operates the complete search stack, enhancements to freshness, protection, relevance, and snippet high quality movement to your brokers routinely by way of the identical managed connector. No model upgrades or migrations are wanted in your aspect.
You’ll be able to entry the Net Search Device connector at the moment in us-east-1 (US East (N. Virginia)).
To get began, see the Net Search Device documentation.
In regards to the authors
Veda Raman
Veda Raman is a Principal Specialist Options Architect for GenAI and machine studying based mostly in Maryland. She has broad expertise in architecting and constructing AgenticAI purposes and helps prospects apply greatest practices in constructing value environment friendly and strong AgenticAI purposes.
Kalyan Garimella
Kalyan Garimella is a Principal Product Supervisor at Amazon AGI, with over 15 years of experience constructing enterprise and client purposes. He leads the event and launch of net search capabilities for Amazon Bedrock AgentCore, tackling a core limitation of contemporary AI brokers: their incapability to entry real-time, factual info past their coaching information, which ends up in outdated responses and hallucinations. By enabling brokers to retrieve and floor their reasoning in stay net information, Kalyan’s work straight improves the reliability and accuracy of enterprise AI brokers at scale. Over his six years at Amazon, he has led initiatives throughout AWS, Amazon Music, and AGI, and beforehand held management roles at Deloitte, the place he drove enterprise digital transformation by way of large-scale Sensible IoT initiatives. Kalyan lives within the Bay Space together with his household.
