AWS Open Source Blog
Category: Open Source
AWS Supports Agent Plugins: An Open Standard for Portable Agent Extensions
If you’ve ever built an MCP server or agent skill, you know that packaging it means adapting for one client, re-writing for another, and repeating that for every tool your team uses. Agent Plugins 1.0.0 is an open source, vendor-neutral specification that gives AI agent extensions a common packaging format so you can package an […]
Introducing Dogwood: runtime verification for AI agents
Part of what makes AI agents so useful is their ability to interact with the external world by running tools. But these tool calls are also the source of the biggest risks when it comes to making agents safe to use. The best way to address these risks in a dependable and reliable manner is […]
Open Protocols with the Strands Agents SDK
If you are building AI agents, you have likely encountered a growing list of protocol acronyms—MCP, A2A, UTCP, AG-UI, and x402—that can feel overwhelming. The open source community has converged on several complementary protocols. An AI agent is only as useful as the systems it can reach: internal tools and data, the external APIs your […]
Building secure AI agents at scale: Introducing Loom for AWS
As organizations move to adopt agentic capabilities to accelerate their business objectives, they are challenged with enabling those capabilities within a security and governance framework that complies with enterprise requirements. Some organizations lean into the promise of serverless capabilities, as those fully managed services enable them to build fast and deliver customer value quickly. Amazon […]
Introducing MCP server for Registry of Open Data on AWS
Today, we are launching an open source Model Context Protocol (MCP) server that brings AI-powered dataset discovery to Registry of Open Data on AWS (RODA). As of today, RODA hosts over 1,100 high-value datasets from more than 400 organizations, spanning satellite imagery, life sciences, climate, geospatial, and more. Ask a research question in Kiro, Claude […]
Building a Stateful IT Service Desk Agent with LangGraph on Amazon EKS
IT support teams face a persistent challenge: employees expect instant answers to common questions (VPN setup, single sign-on troubleshooting, new-hire onboarding), but novel or complex issues still require human expertise. An AI agent that confidently answers, “How do I reset my VPN?” but hallucinates a response to “My IAM Identity Center session keeps expiring after […]
Open Governance for MySQL: A Step Forward for the Community
MySQL — the open source database behind millions of applications worldwide — is opening a new chapter. Today, Oracle announced a community governance model for MySQL that creates pathways for the broader community to participate in the project’s development and direction. This post explains why AWS supports this move and what it means for the […]
Governing AI Assets at Scale with MCP Gateway and Registry
Enterprises that onboard AI assets (MCP servers, agents, skills, and multi-step workflows) need to govern these assets and make them discoverable without blocking innovation. Central IT maintains a list of approved MCP servers and skills for the organization. Each line of business also publishes its own assets to its team, and often to the wider […]
Introducing Trusted Remote Execution: Policy-Enforced Scripts for AI Agents and Humans
Today, we’re announcing Trusted Remote Execution (Rex, for short) — an open source scripting runtime where every system operation is authorized by policy. Scripts are written in Rhai, a lightweight language with no built-in system access. The only way to reach the host is through operations Rex explicitly provides, which are authorized against a Cedar […]
Decoupling Authorization at Scale: MongoDB Atlas and Cedar-Based Resource Policies
As organizations scale applications, managing authorization becomes increasingly complex. What starts as role-based permissions quickly evolves into intricate rules spanning multiple services, regions, and compliance requirements. Traditional approaches of embedding authorization logic in application code lead to fragmented policies scattered across codebases, making them difficult to maintain, audit, and scale. These challenges have become more […]









