{"type":"post","id":"build-a-multi-account-ai-agent-with-agentcore-b891d7","slug":"build-a-multi-account-ai-agent-with-agentcore-b891d7","title":"Build a multi-account AI agent with AgentCore Gateway and MCP","description":"The architecture shifts the centralization problem from data storage to interface governance.","retrieval_nugget":"The architecture shifts the centralization problem from data storage to interface governance.","published_at":"2026-09-25","updated_at":"2026-09-25","record_date":"2026-09-25","date_kind":"published_at","topics":[],"source_urls":["https://aws.amazon.com/blogs/machine-learning/build-a-multi-account-ai-agent-with-agentcore-gateway-and-mcp"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:build-a-multi-account-ai-agent-with-agentcore-b891d7","status":"published","visuals":[],"editorial_provenance":{"schema_version":"newruntime-editorial-copy-v1","content_status":"source_grounded_final","final_copy_sha256":"sha256:7130b071ab8179f5c210b0617d4a57cdc71cfaa4d89774de0062ae5d52b5142f","reviewed_at":"2026-09-25T04:05:16.675Z","source_evidence_count":1,"verified_claim_count":2,"site_analysis_schema_version":"newruntime-site-analysis-v1","site_object_kind":"field_note","observed_fact_count":2,"implication_count":2,"watch_condition_count":2,"related_record_count":0},"analysis":{"schema_version":"newruntime-site-analysis-v1","object_kind":"field_note","thesis":"The architecture shifts the centralization problem from data storage to interface governance.","observed_facts":[{"text":"AWS states that a central platform account runs the agent using Amazon Bedrock AgentCore Gateway and MCP.","source_urls":["https://aws.amazon.com/blogs/machine-learning/build-a-multi-account-ai-agent-with-agentcore-gateway-and-mcp"]},{"text":"AWS states that line-of-business accounts keep their data in their own AWS accounts and expose it as MCP servers with secure cross-account access and fine-grained authorization.","source_urls":["https://aws.amazon.com/blogs/machine-learning/build-a-multi-account-ai-agent-with-agentcore-gateway-and-mcp"]}],"mechanism":"The mechanism is a federated tool boundary: the central agent invokes capabilities defined by each domain account, while authorization and the underlying data remain closer to the domain owner.","why_now":"This matters as organizations move from single-team copilots to agents that need context across finance, operations, support, and product systems.","implications":["The implication is that platform teams can standardize agent orchestration without automatically becoming the owner of every dataset.","MCP can serve as an operational contract between a shared agent layer and independently governed domain systems."],"evidence_boundary":"The evidence boundary is important: this is an AWS reference architecture and does not demonstrate production performance, operational cost, or the sufficiency of its controls in a specific enterprise.","watch_conditions":["Watch whether deployments define tool-level permissions, identity propagation, audit logs, and revocation paths that remain intelligible across accounts.","Watch for evidence that cross-account MCP boundaries remain manageable as the number of domains and tools grows."],"related_records":[],"new_branch_reason":"This starts a distinct analytical record because the supplied material is specifically about federated multi-account agent governance through AgentCore Gateway and MCP, not a documented continuation of any prior record."},"routes":{"html":"https://newruntime.com/posts/build-a-multi-account-ai-agent-with-agentcore-b891d7/","markdown":"https://newruntime.com/posts/build-a-multi-account-ai-agent-with-agentcore-b891d7.md","json":"https://newruntime.com/posts/build-a-multi-account-ai-agent-with-agentcore-b891d7.json"},"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"next_reads":[{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/source-ledger.json","url":"https://newruntime.com/source-ledger.json","title":"Source Ledger","reason":"Inspect the public source evidence graph.","media_type":"application/json"}]}