Oleksandr Kuzmenko, EditorPublished 4 min readAI-assisted · editor-reviewed
TL;DR
- Claude Code can now run as a remote agent on Amazon Bedrock AgentCore with built-in security controls.
- Tasks execute in individual, isolated sessions within your AWS account.
- Every model call passes directly through Amazon Bedrock.
- Coding results are returned automatically as GitHub pull requests for human review.
Key facts
- Platform
- Amazon Bedrock AgentCore
- Model Gateway
- Amazon Bedrock
- Deliverable
- GitHub Pull Request
Isolated Remote Sessions on Amazon Bedrock AgentCore
Amazon Bedrock AgentCore now supports running Claude Code as a remote agent governed by enterprise security controls. Instead of executing scripts and mutating files directly on a developer workstation, each coding task is run within an isolated session directly inside the customer's AWS account.
Secure Model Invocation and Git Pull Requests
The architecture guarantees that all model calls are routed through Amazon Bedrock rather than external unmanaged endpoints. Once the remote Claude Code session completes its coding task, the final deliverables are returned as a GitHub pull request, allowing developers to review and merge the code through standard governance workflows.
When to use
- When running Claude Code in enterprise environments requiring strict isolation and AWS-mediated model access.
When NOT to use
- When performing quick local refactorings that require immediate interactive terminal input.
What to do today
- Evaluate Amazon Bedrock AgentCore remote sessions for delegating isolated developer tasks.
- Configure repository permissions to accept pull requests from automated Bedrock AgentCore sessions.
Step names are taken from What to do today.
Step names are taken from What to do today. Evaluate Amazon Bedrock AgentCore remote sessions for delegating isolated developer tasks.. Configure repository permissions to accept pull requests from automated Bedrock AgentCore sessions.
- Evaluate Amazon Bedrock AgentCore remote sessions for delegating isolated developer tasks.
- Configure repository permissions to accept pull requests from automated Bedrock AgentCore sessions.