OpenAI's Agent Harness Moved Into AWS, and the Paperwork Is the Point

AWS made OpenAI models generally available on Bedrock back on June 1, and that was the model-access story: GPT-5.5 and Codex on Bedrock's inference engine, pricing matched to OpenAI's first-party rates, usage counting toward existing AWS commitments. The more interesting move came four months later. On September 29, AWS and OpenAI opened the public preview of Bedrock Managed Agents (BMA), and what relocated is not another model endpoint — it's the agent loop itself. The harness that preserves state, selects tools, executes code, and coordinates multi-step work now runs inside your AWS account.

Read the primary docs and you'll notice what they lead with, because it isn't reasoning quality — it's chain of command. Each agent operates with its own IAM role. Authentication is SigV4 credentials instead of an API key living in somebody's .env file. Human approval gates sit in front of consequential actions, and supported API activity gets recorded in CloudTrail. Sessions are durable: messages, tool calls, and intermediate results persist, so a half-finished task can be resumed days later with new information. You pick where the work actually runs — Bedrock AgentCore Runtime or your own compute — and the harness compacts context as conversations grow, which is a direct answer to the context-bloat problem agent builders have been fighting all year. MCP servers plug in for tools, and reusable skills can be attached for specialized procedures — the same building blocks the OpenAI-side Agents API pushes, just with AWS plumbing underneath. For a platform team, this is the first time "run an OpenAI agent in production" arrives with the same audit primitives as everything else in the account: the agent is an identity you can revoke, not a cron job you hope stays well-behaved.

An abstract image
Source image 1

Two asterisks, though, and both are in OpenAI's own documentation. First: shared concepts don't imply identical API contracts — the Bedrock build is a customized Agents API, an AWS-flavored dialect, and porting code between the two is not a find-and-replace job. Second: preview pricing is "no additional charge beyond the underlying AWS resources," which is precisely how a cloud service earns a permanent place in your architecture before real pricing shows up at general availability. The strategic read is that model access is already commoditized; what's being sold now is governance. AWS is betting that the buyer of production agents is the compliance team, not the prompt engineer. If you already run agents somewhere, does moving the loop into AWS for IAM roles and CloudTrail trails change your risk posture enough to accept a forked API dialect — or is the audit trail something you'd rather keep owning yourself?

Source article image
Source image 2

Sources

Comments

Popular posts from this blog

AI Is Starting to Feel Less Like a Gadget and More Like Infrastructure

When Two AI Bots Finally Learned to Talk in Discord

Enterprise AI Is Quietly Becoming a Systems Integration Problem