
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@aws/agentcore-cdk
Advanced tools
L3 CDK constructs for Amazon Bedrock AgentCore. Deploy agent infrastructure with strongly-typed, declarative specifications.
npm install @aws/agentcore-cdk
Note: aws-cdk-lib and constructs are peer dependencies. If you don't already have them:
npm install @aws/agentcore-cdk aws-cdk-lib constructs
import { AgentCoreApplication, AgentCoreMcp } from '@aws/agentcore-cdk';
import type { AgentCoreProjectSpec } from '@aws/agentcore-cdk';
import { Stack } from 'aws-cdk-lib';
const spec: AgentCoreProjectSpec = {
name: 'myProject',
version: 1,
agents: [
{
type: 'AgentCoreRuntime',
name: 'myAgent',
build: 'CodeZip',
entrypoint: 'main.py',
codeLocation: 'app/myAgent/',
runtimeVersion: 'PYTHON_3_12',
},
],
};
class MyStack extends Stack {
constructor(scope: Construct, id: string) {
super(scope, id);
new AgentCoreApplication(this, 'App', { spec });
}
}
Main L3 construct for deploying agent environments.
L3 construct for MCP gateways and tools.
Individual agent environment construct.
These constructs can be used independently without the CLI:
import { AgentCoreApplication, ConfigIO } from '@aws/agentcore-cdk';
// Option 1: Pass spec directly
new AgentCoreApplication(this, 'App', {
spec: {
name: 'myProject',
version: 1,
agents: [
{
type: 'AgentCoreRuntime',
name: 'myAgent',
build: 'CodeZip',
entrypoint: 'main.py',
codeLocation: 'app/myAgent/',
runtimeVersion: 'PYTHON_3_12',
},
],
},
});
// Option 2: Read from disk (using built-in ConfigIO)
const configIO = new ConfigIO({ baseDir: './agentcore' });
const spec = await configIO.readProjectSpec();
new AgentCoreApplication(this, 'App', { spec });
@aws/agentcore - CLI tool that uses these constructs via templated CDK projectsSee CONTRIBUTING for more information.
This project is licensed under the Apache-2.0 License.
FAQs
L3 CDK constructs for Amazon Bedrock AgentCore
The npm package @aws/agentcore-cdk receives a total of 1,813 weekly downloads. As such, @aws/agentcore-cdk popularity was classified as popular.
We found that @aws/agentcore-cdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 20 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.