AWS官方给出两种具体架构，用ALB+WAF保护Bedrock AgentCore，还能避免外部直接访问，安全配置参考。
本文介绍两种使用AWS WAF和ALB保护Amazon Bedrock AgentCore Runtime的架构模式。两种模式都通过互联网ALB配合WAF，并利用VPC接口端点路由流量至AgentCore。模式1在ALB和VPC端点之间插入Lambda代理，实现请求转换的完全控制。模式2直接由ALB指向VPC端点的ENI IP，省去Lambda跳转。文中还演示了通过资源策略关闭直接访问后门，并已验证SigV4和OAuth (Amazon Cognito JWT)两种认证方式。
Securing Amazon Bedrock AgentCore Runtime with AWS WAF
This post shows you two architecture patterns that address this problem. Both use an internet-facing ALB with AWS WAF and route traffic through a VPC Interface Endpoint to AgentCore Runtime. Pattern 1 places an AWS Lambda proxy between the ALB and the VPC Endpoint, giving you full control over request transformation. Pattern 2 targets the VPC Endpoint ENI IP addresses directly from the ALB, removing the Lambda hop entirely. You also learn how to close the direct-access backdoor with a resource policy so that traffic flows through AWS WAF only. Both patterns have been tested end-to-end with SigV4 and OAuth (Amazon Cognito JWT) authentication.