AgentCore GatewayのAgent Targetを試してみた

https://{GatewayのID}.gateway.bedrock-agentcore.{リージョン}.amazonaws.com/{ターゲット名}/invocations

{
  "http": {
    "agentcoreRuntime": {
      "arn": "arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/RUNTIME_ID",
      "qualifier": "DEFAULT"
    }
  }
}

npm install -g @aws/agentcore
agentcore --version

agentcore create --name AgentTargetDemo --no-agent
cd AgentTargetDemo

agentcore add agent --name OrderAgent --language Python --framework Strands \
  --model-provider Bedrock --memory none --protocol A2A

agentcore add agent --name TechAgent --language Python --framework Strands \
  --model-provider Bedrock --memory none --protocol A2A

from strands import Agent, tool
from strands.multiagent.a2a.executor import StrandsA2AExecutor
from bedrock_agentcore.runtime import serve_a2a
from model.load import load_model

# 注文DBのモック
ORDERS = {
    "ORD-1001": {"item": "スマートスピーカー Echo Mini", "status": "配達済み", "delivered_at": "2026-07-01"},
    "ORD-1002": {"item": "ロボット掃除機 CleanBot X", "status": "配送中", "estimated_delivery": "2026-07-09", "carrier": "クラメソ急便", "tracking_id": "CM-4471-8829"},
    "ORD-1003": {"item": "ワイヤレスイヤホン AirSound Pro", "status": "配送遅延", "delay_reason": "配送センターの混雑", "estimated_delivery": "2026-07-12"},
}

@tool
def lookup_order(order_id: str) -> str:
    """注文IDから注文情報（商品名・配送状況・お届け予定日など）を照会する。"""
    order = ORDERS.get(order_id.upper())
    if not order:
        return f"注文 {order_id} が見つかりません。注文IDをご確認ください。"
    return str(order)

SYSTEM_PROMPT = """
あなたはECサイトの注文・配送担当エージェントです。
注文状況や配送に関する問い合わせに、lookup_orderツールで注文DBを照会して簡潔に回答してください。
担当外の質問（製品の使い方など）には答えず、担当外である旨を返してください。
"""

agent = Agent(
    name="OrderAgent",
    description="ECサイトの注文・配送担当。注文IDをもとに配送状況やお届け予定日を照会して回答します。",
    model=load_model(),
    system_prompt=SYSTEM_PROMPT,
    tools=[lookup_order],
)

if __name__ == "__main__":
    serve_a2a(StrandsA2AExecutor(agent))

agentcore add gateway --name AgentGateway --protocol-type None --authorizer-type AWS_IAM

agentcore add gateway-target --name order-support --gateway AgentGateway \
  --type http-runtime --runtime OrderAgent

agentcore add gateway-target --name tech-support --gateway AgentGateway \
  --type http-runtime --runtime TechAgent

agentcore deploy -y

✓ Deployed to 'default' (stack: AgentCore-AgentTargetDemo-default)
Outputs:
  GatewayAgentGatewayUrlOutput: https://agenttargetdemo-agentgateway-xxxx.gateway.bedrock-agentcore.us-east-1.amazonaws.com
  GatewayTargetOrderSupportIdOutput: V2RNRURGGW
  GatewayTargetTechSupportIdOutput: 35A8UJKZCK
  ApplicationAgentOrderAgentRuntimeArnOutput: arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_OrderAgent-xxxx
  ApplicationAgentTechAgentRuntimeArnOutput: arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_TechAgent-xxxx

uvx awscurl --service bedrock-agentcore --region us-east-1 \
  "https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/order-support/invocations/.well-known/agent-card.json"

{"message":"User: arn:aws:sts::<アカウントID>:assumed-role/AgentCore-AgentTargetDemo-McpGatewayAgentGatewayRol-xxxx/gateway-session-xxxx is not authorized to perform: bedrock-agentcore:GetAgentCard on resource: arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_OrderAgent-xxxx because no identity-based policy allows the bedrock-agentcore:GetAgentCard action"}

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Action": "bedrock-agentcore:GetAgentCard",
    "Resource": [
      "arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_OrderAgent-xxxx",
      "arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_OrderAgent-xxxx/runtime-endpoint/*",
      "arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_TechAgent-xxxx",
      "arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_TechAgent-xxxx/runtime-endpoint/*"
    ]
  }]
}

{
  "capabilities": {"streaming": true},
  "defaultInputModes": ["text"],
  "defaultOutputModes": ["text"],
  "description": "ECサイトの注文・配送担当。注文IDをもとに配送状況やお届け予定日を照会して回答します。",
  "name": "OrderAgent",
  "preferredTransport": "JSONRPC",
  "protocolVersion": "0.3.0",
  "skills": [{"description": "ECサイトの注文・配送担当。注文IDをもとに配送状況やお届け予定日を照会して回答します。", "id": "main", "name": "OrderAgent", "tags": ["main"]}],
  "url": "https://bedrock-agentcore.us-east-1.amazonaws.com/runtimes/arn%3Aaws%3A.../invocations",
  "version": "0.1.0"
}

uvx awscurl --service bedrock-agentcore --region us-east-1 -X POST \
  "https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/order-support/invocations" \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": "req-001",
    "method": "message/send",
    "params": {
      "message": {
        "role": "user",
        "parts": [{"kind": "text", "text": "注文ORD-1002はいつ届きますか？"}],
        "messageId": "11111111-1111-1111-1111-111111111111"
      }
    }
  }'

{
  "id": "req-001",
  "jsonrpc": "2.0",
  "result": {
    "artifacts": [{
      "name": "agent_response",
      "parts": [{"kind": "text", "text": "注文ORD-1002（ロボット掃除機 CleanBot X）は現在配送中です。\n\nお届け予定日：2026年7月9日\n配送業者：クラメソ急便\n追跡番号：CM-4471-8829\n..."}]
    }],
    "kind": "task",
    "status": {"state": "completed"}
  }
}

"""ローカルで動くトリアージ（一次受付）エージェント。

Gateway経由でリモートの専門エージェント2体（OrderAgent / TechAgent）に
A2Aプロトコルで問い合わせを委譲する。
"""

import boto3
import httpx
from a2a.client import ClientConfig
from mcp_proxy_for_aws.sigv4_helper import SigV4HTTPXAuth
from strands import Agent, tool
from strands.agent.a2a_agent import A2AAgent

GATEWAY_URL = "https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com"

auth = SigV4HTTPXAuth(
    credentials=boto3.Session().get_credentials(),
    service="bedrock-agentcore",
    region="us-east-1",
)

async def log_request(request):
    print(f"  [HTTP] {request.method} {request.url}")

def make_client() -> httpx.AsyncClient:
    return httpx.AsyncClient(
        auth=auth, timeout=300, event_hooks={"request": [log_request]}
    )

def make_agent(target: str) -> A2AAgent:
    # A2AAgentは呼び出しのたびに新しいイベントループを作るため、インスタンスを
    # 使い回すと2回目の呼び出しがEvent loop is closedで失敗する。
    # ツール呼び出しごとにhttpxクライアントごと作り直す。
    return A2AAgent(
        endpoint=f"{GATEWAY_URL}/{target}/invocations",
        client_config=ClientConfig(httpx_client=make_client(), streaming=False),
    )

@tool
def ask_order_agent(question: str) -> str:
    """注文・配送に関する質問を注文担当エージェントに問い合わせる。注文IDがあれば含めること。"""
    result = make_agent("order-support")(question)
    return str(result.message["content"][0]["text"])

@tool
def ask_tech_agent(question: str) -> str:
    """製品の設定方法・トラブルシューティングをテクニカルサポートエージェントに問い合わせる。製品名を含めること。"""
    result = make_agent("tech-support")(question)
    return str(result.message["content"][0]["text"])

orchestrator = Agent(
    system_prompt=(
        "あなたはECサイトのカスタマーサポート一次受付です。"
        "問い合わせを分解し、注文・配送の質問はask_order_agentに、"
        "製品の使い方・トラブルはask_tech_agentに委譲して、結果を統合して回答してください。"
    ),
    tools=[ask_order_agent, ask_tech_agent],
)

orchestrator(
    "注文ORD-1002で買ったロボット掃除機がまだ届きません。いつ届きますか？"
    "あと、届いたらすぐ使いたいのでWi-Fi接続のやり方も教えてください。"
)

uv run --with 'strands-agents[a2a]' --with mcp-proxy-for-aws --with boto3 local_orchestrator.py

Tool #1: ask_order_agent
Tool #2: ask_tech_agent
  [HTTP] GET https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/order-support/invocations/.well-known/agent-card.json
  [HTTP] GET https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/tech-support/invocations/.well-known/agent-card.json
  [HTTP] POST https://bedrock-agentcore.us-east-1.amazonaws.com/runtimes/arn%3Aaws%3A...OrderAgent-xxxx/invocations
  [HTTP] POST https://bedrock-agentcore.us-east-1.amazonaws.com/runtimes/arn%3Aaws%3A...TechAgent-xxxx/invocations

"runtimes": [
  {
    "name": "OrderAgent",
    "protocol": "A2A",
    "envVars": [
      {
        "name": "AGENTCORE_RUNTIME_URL",
        "value": "https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/order-support/invocations"
      }
    ]
  },
  {
    "name": "TechAgent",
    "protocol": "A2A",
    "envVars": [
      {
        "name": "AGENTCORE_RUNTIME_URL",
        "value": "https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/tech-support/invocations"
      }
    ]
  }
]

agentcore deploy -y

https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/order-support/invocations

Tool #1: ask_order_agent
Tool #2: ask_tech_agent
  [HTTP] GET https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/order-support/invocations/.well-known/agent-card.json
  [HTTP] GET https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/tech-support/invocations/.well-known/agent-card.json
  [HTTP] POST https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/tech-support/invocations
  [HTTP] POST https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/order-support/invocations
両方の情報が揃いました！まとめてご案内いたします

## 配送状況（注文 ORD-1002）

ご注文のロボット掃除機（CleanBot X）は現在配送中です。

| 項目 | 内容 |
|------|------|
| お届け予定日 | 2026年7月9日 |
| 配送業者 | クラメソ急便 |
| 追跡番号 | CM-4471-8829 |

## Wi-Fi接続の設定方法（CleanBot X）

1. 本体を充電ドックに設置する
2. スマホに「CleanBot Home」アプリをインストールする
3. アプリを起動し、画面の指示に従って設定を進める
4. Wi-Fi接続時は2.4GHz帯のネットワークを選択する
   - 5GHz帯には非対応のためご注意ください

到着まであと少しです！ご不明な点があればお気軽にお申し付けください

aws bedrock-agentcore-control put-resource-policy --region us-east-1 \
  --resource-arn "arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_OrderAgent-xxxx" \
  --policy '{
    "Version": "2012-10-17",
    "Statement": [
      {
        "Sid": "AllowOnlyGatewayRole",
        "Effect": "Allow",
        "Principal": {"AWS": "arn:aws:iam::<アカウントID>:role/<Gateway実行ロール名>"},
        "Action": "bedrock-agentcore:InvokeAgentRuntime",
        "Resource": "arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_OrderAgent-xxxx"
      },
      {
        "Sid": "DenyOtherPrincipals",
        "Effect": "Deny",
        "Principal": {"AWS": "*"},
        "Action": "bedrock-agentcore:InvokeAgentRuntime",
        "Resource": "arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_OrderAgent-xxxx",
        "Condition": {
          "ArnNotEquals": {
            "aws:PrincipalArn": "arn:aws:iam::<アカウントID>:role/<Gateway実行ロール名>"
          }
        }
      }
    ]
  }'

Runtime直接呼び出し → 403 explicit deny in a resource-based policy
Gateway経由        → HTTP 200（正常に応答）

{"message":"User: arn:aws:sts::<アカウントID>:assumed-role/<自分のロール>/xxx is not authorized to perform: bedrock-agentcore:InvokeAgentRuntime on resource: arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_OrderAgent-xxxx with an explicit deny in a resource-based policy"}

aws bedrock-agentcore-control delete-resource-policy --region us-east-1 \
  --resource-arn "arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:runtime/AgentTargetDemo_OrderAgent-xxxx"

agentcore remove all --json
agentcore deploy -y

cp = boto3.client("bedrock-agentcore-control", region_name="us-east-1")
targets = cp.list_gateway_targets(gatewayIdentifier=GATEWAY_ID)["items"]

with httpx.Client(auth=auth, timeout=30) as client:  # authはSigV4HTTPXAuth
    for t in targets:
        if t["status"] != "READY":
            continue
        card = client.get(
            f"{GATEWAY_URL}/{t['name']}/invocations/.well-known/agent-card.json"
        ).json()
        agent_list.append({
            "id": t["name"],
            "displayName": card["name"],
            "description": card["description"],
            "connectUrl": card["url"],
        })

[
  {
    "id": "tech-support",
    "displayName": "TechAgent",
    "description": "ECサイトのテクニカルサポート担当。製品の初期設定・トラブルシューティングをナレッジ検索で解決します。",
    "connectUrl": "https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/tech-support/invocations"
  },
  {
    "id": "order-support",
    "displayName": "OrderAgent",
    "description": "ECサイトの注文・配送担当。注文IDをもとに配送状況やお届け予定日を照会して回答します。",
    "connectUrl": "https://<GatewayのID>.gateway.bedrock-agentcore.us-east-1.amazonaws.com/order-support/invocations"
  }
]

forbid (
  principal == AgentCore::IamEntity::"arn:aws:sts::<アカウントID>:assumed-role/<ロール名>",
  action == AgentCore::Action::"order-support___POST:/invocations",
  resource == AgentCore::Gateway::"<GatewayのARN>"
);

unrecognized action `AgentCore::Action::"order-support___POST:/invocations"`
did you mean `AgentCore::Action::"arn:aws:bedrock-agentcore:us-east-1:<アカウントID>:gateway/agenttargetdemo-agentga...

cp.update_gateway_target(
    gatewayIdentifier="<GatewayのID>",
    targetId="<ターゲットID>",
    name="order-support",
    targetConfiguration={"http": {"agentcoreRuntime": {
        "arn": "<OrderAgentのRuntime ARN>",
        "qualifier": "DEFAULT",
        # POST /invocations にA2AのJSON-RPCが来ることを表すOpenAPIを明示
        "schema": {"source": {"inlinePayload": json.dumps(openapi_schema)}},
    }}},
    credentialProviderConfigurations=[{"credentialProviderType": "GATEWAY_IAM_ROLE"}],
)

order-support → HTTP 403 Request Denied [Policy evaluation denied due to DenyOrderForMyRoleV5]
tech-support  → HTTP 200（通常応答）