AI Agent FactoryGitHub

Reference

Support envelope

Validated regions, status, open advisories and the known limitations each project documents, collected in one place for four samples centered on Amazon Bedrock and Amazon Bedrock AgentCore.

The support envelope applies to the exact tested implementation: the reference implementations, regions and configurations each project names. Replacements and other regions require independent validation (root README). The limitation bullets below are quoted from the project files without paraphrase.

1. Learn

Building an Enterprise Agentic AI Platform

Project page

Workshop: validated regions and status
FactValueSource
Validated regionsAWS-run events: us-west-2. Self-paced: us-west-2 (default), us-east-1, or eu-west-1. Other regions are not supported. The contentspec.yaml deployableRegions list is us-west-2, us-east-1 and eu-west-1. Workshop Studio events provision the account in us-west-2 (content/introduction/getting-started/aws-event.en.md).contentspec.yaml
Default regionus-west-2README.md: Quick start (self-paced)
StatusPublished on AWS Builder Center (Workshop Studio); last published 2026-08-18 Publication state and date come from the Workshop Studio catalog entry, not from the repository, which holds no publish record to quote.Workshop Studio catalog
Versionnot documented The workshop has no version badge, tag or CHANGELOG. contentspec.yaml declares only the Workshop Studio schema version 2.0.none

Open advisories

Known limitations, as documented

2. Build

AgentCore Visual Workflow Platform

Project page

Self-Service: validated regions and status
FactValueSource
Validated regionsAny AWS region; us-east-1 is the default Outside us-east-1 the WAF web ACL is REGIONAL on the Cognito user pool and the CloudFront distribution runs without an edge ACL. APAC regions may need the model ID set explicitly.README.md: Prerequisites
Default regionus-east-1README.md: Quickstart
StatusVersion 0.1.0 released 2026-07-17, with unreleased changes recorded in CHANGELOG.mdCHANGELOG.md
Version0.1.0 plus unreleased changesCHANGELOG.md

No open advisories are recorded for this project.

Known limitations, as documented

  • WAF outside us-east-1
    The same rule set as a REGIONAL WebACL on the Cognito user pool. The distribution runs without an edge ACL

    Source: README.md: Deploying to another region

  • APAC inference prefixes
    One region-specific caveat worth knowing before you pick a region: Bedrock's cross-region inference prefixes are us., eu. and apac., and the apac. family covers only the older Claude models. In APAC, current-generation models are published under country prefixes (jp. in ap-northeast-1, au. in ap-southeast-2) or as global., so an APAC deployment may need its model ID set explicitly. us-* and eu-* regions need no such adjustment.

    Source: README.md: Deploying to another region

  • RBAC is advisory by default
    Scope-based RBAC (services/rbac.py) ships advisory by default (RBAC_ENFORCE=false): every request is allowed, but a request that would be denied logs RBAC advisory (would-deny): ....

    Source: RBAC_ROLLOUT.md: RBAC Enforcement Rollout Runbook

  • Control plane has no VPC egress
    The proxy must be reachable from the deploy Lambda. The control plane has no VPC egress, so a VPC-private LiteLLM cannot be probed and the deploy will fail at step 3 even though a VPC-mode Runtime could reach it at invoke time.

    Source: README.md: As the gateway itself, per agent

3. Govern

Enterprise MCP Governance Gateway

Project page

MCP Gateway: validated regions and status
FactValueSource
Validated regionsus-west-2 by default; configurable; no tested-regions list is publishedREADME.md
Default regionus-west-2README.md: Deploy
StatusSample and demonstration stack; not hardened for productionREADME.md: Security notes
Versionnot documented No version badge, tag or CHANGELOG in the project folder.none

No open advisories are recorded for this project.

Known limitations, as documented

4. Scale

Enterprise Agentic AI Platform Blueprint

Project page

Blueprint: validated regions and status
FactValueSource
Validated regionsValidated in eu-west-1; SCP allow-list us-west-2, us-east-1, eu-west-1 The SCP region allow-list comes from PLATFORM_APPROVED_REGIONS in packages/platform-baselines/src/approved-regions.ts. A different Region is a new validation target, not a configuration-only substitution.README.md: 5. Prerequisites
Default regioneu-west-1README.md: 6.1 One-time setup
StatusVersion 1.0.0 (README badge); two open advisories (issues #29 and #30)README.md
Version1.0.0README.md

Open advisories

Live-validated reference envelope

What Blueprint states it has validated, quoted from its README (source). Anything outside this list is covered by the limitations below.

  • Platform and Workload pipelines through production.
  • AWS Agent Registry record resolution and governance.
  • Generated agents using LiteLLMModel and MCPClient.
  • AgentCore Identity, Runtime, Memory, Inference Gateway, and Tool Gateway.
  • Benign and adversarial Guardrail calls with exact admitted and blocked outcomes.
  • Exact HTTP 429 behavior for an unallocated model.
  • Direct cross-account Runtime denial.
  • Runtime update cancellation, rollback, and re-run while sampled sessions remained available.
  • Evaluation gates for regression, quality, tool success, refusal, latency, and cost.
  • Management queries across linked Platform and Workstream logs and metrics.
  • Gateway application-log and OTEL span correlation after regional propagation.
  • Dependency-ordered teardown and direct zero-residual inventories across all three account roles.

Known limitations, as documented

Security controls for each project are compared on the Security page. Costs and teardown procedures are on Costs and cleanup.