AWS expands AgentCore runtime isolation, compute and usage billing
AWS released a next-generation Amazon Bedrock AgentCore runtime that keeps each session in a hardware-isolated Firecracker MicroVM with its own identity, policy and audit trail. It adds sub-two-second starts, up to 8 vCPUs and 32 GB, scale-to-zero memory reclamation and FUSE-mounted S3 storage inside the session trust boundary.
Why it matters: The update changes the operating and cost envelope for long-running agents that execute code, use browsers and wait on people or tools. Per-session compute and data isolation are useful controls, but storage scope, idle billing and recovered state now need…