Connect Amazon Bedrock AgentCore to cross-account knowledge bases
Amazon Bedrock AgentCore agents can query cross-account knowledge bases without copying governed data
AWS published a guide for connecting Bedrock AgentCore agents in one AWS account to knowledge bases (backed by Redshift Serverless) in a separate account using cross-account IAM role assumption via STS. The pattern addresses a real enterprise gap: Bedrock Knowledge Bases resource policies support Retrieve but not RetrieveAndGenerate cross-account, forcing an IAM role assumption workaround. Two orchestration variants are provided — a code-based Strands agent and a declarative AgentCore harness — catering to different enterprise deployment styles.