# Amazon adds remote Claude Code support on Bedrock AgentCore with security controls

Digest AI · Agents & Tools · published 2026-11-06T16:45:58Z

Canonical: https://digestai.news/story/amazon-adds-remote-claude-code-support-on-bedrock-agentcore-with-secur

## Summary

Amazon’s Machine Learning Blog details a new pattern that lets developers run Claude Code as a remote agent on Amazon Bedrock AgentCore. Each coding task is executed in its own isolated microVM inside the user’s AWS account, preserving the same data‑protection guarantees that Bedrock offers for on‑premise use.

The workflow starts with a local Claude Code plugin that forwards a request through an IAM‑signed API Gateway call. A Lambda function screens the prompt with an Amazon Bedrock Guardrails policy, queues the job in SQS and launches an AgentCore runtime session that pulls a container image from Amazon ECR. Inside the microVM the agent clones a trusted GitHub repository, plans changes with Claude Opus, writes code with Claude Sonnet, runs the repository’s own test commands, and finally opens a draft pull request using a short‑lived GitHub App token that expires after eight hours. All network traffic stays within a private VPC, and Mantle’s zero‑operator‑access design ensures AWS staff cannot view prompts or responses.

Deploying the sample stack takes about 15–25 minutes, with an additional 8–12 minutes to register a repository. The solution builds a roughly 1.3 GB ARM64 image and incurs a default $200 monthly charge while idle, covering NAT, VPC endpoints, and related services.

## Key points

- Claude Code can run as a remote agent on Amazon Bedrock AgentCore, each task in an isolated microVM.
- The sample creates a GitHub pull request after coding, using short‑lived GitHub App credentials that expire after 8 hours.
- Deploying the solution takes 15–25 minutes, plus 8–12 minutes to register a repository, and incurs a default $200 monthly charge.

## Why it matters

Remote coding agents let teams offload code generation to secure, scalable AWS infrastructure while keeping data private, accelerating development workflows without exposing prompts to model providers or operators.

## Sources

1. [Extend Claude Code to remote sessions on Amazon Bedrock AgentCore with security controls](https://aws.amazon.com/blogs/machine-learning/extend-claude-code-to-remote-sessions-on-amazon-bedrock-agentcore-with-security-controls) (AWS Machine Learning Blog, 2026-11-06, primary source)

## Cite

Digest AI, "Amazon adds remote Claude Code support on Bedrock AgentCore with security controls", 6 November 2026, https://digestai.news/story/amazon-adds-remote-claude-code-support-on-bedrock-agentcore-with-secur

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/amazon-adds-remote-claude-code-support-on-bedrock-agentcore-with-secur.json