cdk-local (cdkl) で Bedrock AgentCore Runtime のローカル開発体験を試してみた

from http.server import HTTPServer, BaseHTTPRequestHandler
import json, os

VERSION = "AAA"

class Handler(BaseHTTPRequestHandler):
    def do_GET(self):
        if self.path == '/ping':
            self.send_response(200)
            self.end_headers()
            return
        self.send_response(404)
        self.end_headers()

    def do_POST(self):
        if self.path == '/invocations':
            greeting = os.environ.get('GREETING', 'NOT_SET')
            resp = json.dumps({"greeting": greeting, "version": VERSION})
            self.send_response(200)
            self.send_header('Content-Type', 'application/json')
            self.end_headers()
            self.wfile.write(resp.encode())
            return
        self.send_response(404)
        self.end_headers()

if __name__ == '__main__':
    server = HTTPServer(('0.0.0.0', 8080), Handler)
    server.serve_forever()

import * as cdk from 'aws-cdk-lib';
import { Construct } from 'constructs';
import * as agentcore from 'aws-cdk-lib/aws-bedrockagentcore';
import * as ssm from 'aws-cdk-lib/aws-ssm';
import * as path from 'path';

export class AgentcoreAppStack extends cdk.Stack {
  constructor(scope: Construct, id: string, props?: cdk.StackProps) {
    super(scope, id, props);

    const greeting = ssm.StringParameter.valueForStringParameter(this, '/cdkl-test/greeting');

    const artifact = agentcore.AgentRuntimeArtifact.fromCodeAsset({
      path: path.join(__dirname, '..', 'agent-code'),
      runtime: agentcore.AgentCoreRuntime.PYTHON_3_12,
      entrypoint: ['main.py'],
    });

    new agentcore.Runtime(this, 'HelloAgent', {
      runtimeName: 'helloAgent',
      agentRuntimeArtifact: artifact,
      environmentVariables: {
        GREETING: greeting,
      },
    });
  }
}

mkdir agentcore-app && cd agentcore-app
cdk init app --language typescript
npm install aws-cdk-lib constructs

aws ssm put-parameter --name /cdkl-test/greeting --type String --value "Hello from SSM!" --overwrite --region us-east-1
cdk deploy --region us-east-1

cdkl:    17262ms, 16669ms, 16766ms, 16566ms  → 平均 16,816ms (min 16,566 / max 17,262)
hotswap: 15658ms, 15408ms, 15014ms, 14881ms  → 平均 15,240ms (min 14,881 / max 15,658)
normal:  35017ms, 34980ms, 35097ms, 35136ms  → 平均 35,058ms (min 34,980 / max 35,136)

#!/bin/bash
START=$(date +%s%3N)

# バックグラウンドで起動
cdkl invoke-agentcore --path ./agent-code --runtime python3.12 --entrypoint main.py &
CDKL_PID=$!

# /ping が応答するまで待機
until curl -s http://localhost:8080/ping > /dev/null 2>&1; do
  sleep 0.5
done

# /invocations にリクエスト
RESPONSE=$(curl -s -X POST http://localhost:8080/invocations)
END=$(date +%s%3N)

echo "Response: $RESPONSE"
echo "Time: $((END - START))ms"

# 停止
kill $CDKL_PID 2>/dev/null

deploy_start      = 0秒
最後に旧版応答    = +35秒
新版に切替       = +40秒
CFn完了          = +44秒

cdk deploy --hotswap --region us-east-1

✨ AWS::BedrockAgentCore::Runtime 'helloAgent-fksMu1GelV' hotswapped!
✨ hotswap-deployment time: 0.69s
✨ Total time: 11.93s

curl -s -X POST https://<runtime-endpoint>/invocations

{"version": "BBB"}

cdk diff --region us-east-1

Stack AgentcoreAppStack
There were no differences

cdkl invoke-agentcore --path ./agent-code --runtime python3.12 --entrypoint main.py

curl -s -X POST http://localhost:8080/invocations | jq .

{"greeting": "NOT_SET", "version": "AAA"}

cdkl invoke-agentcore --path ./agent-code --runtime python3.12 --entrypoint main.py \
  --from-cfn-stack AgentcoreAppStack

curl -s -X POST http://localhost:8080/invocations | jq .

{"greeting": "Hello from SSM!", "version": "AAA"}

# --assume-role 確認用の追加コード（main.py に追記）
import boto3

# do_POST 内:
caller_arn = boto3.client("sts").get_caller_identity()["Arn"]
resp = json.dumps({"greeting": greeting, "version": VERSION, "callerArn": caller_arn})

echo "boto3" > agent-code/requirements.txt

cdkl invoke-agentcore --path ./agent-code --runtime python3.12 --entrypoint main.py

arn:aws:sts::123456789012:assumed-role/cdkl-test-ec2-role/...

cdkl invoke-agentcore --path ./agent-code --runtime python3.12 --entrypoint main.py \
  --assume-role arn:aws:iam::123456789012:role/AgentcoreAppStack-HelloAgentExecutionRoleB1EEC5C6-xxxxx

arn:aws:sts::123456789012:assumed-role/AgentcoreAppStack-HelloAgentExecutionRoleB1EEC5C6-xxxxx/...

aws iam update-assume-role-policy --role-name AgentcoreAppStack-HelloAgentExecutionRoleB1EEC5C6-xxxxx \
  --policy-document '{
    "Version": "2012-10-17",
    "Statement": [
      {
        "Effect": "Allow",
        "Principal": {"Service": "bedrock.amazonaws.com"},
        "Action": "sts:AssumeRole"
      },
      {
        "Effect": "Allow",
        "Principal": {"AWS": "arn:aws:iam::123456789012:role/cdkl-test-ec2-role"},
        "Action": "sts:AssumeRole"
      }
    ]
  }'