ReleaseBytes
aws AWS What's New ·

Amazon Bedrock AgentCore enables unified observability for AI agents

aiobservabilityawsengineeraws-bedrockaws-iam
feature

Amazon Bedrock AgentCore now consolidates agent traces and prompts into a single Amazon CloudWatch log group, simplifying debugging and access control for AI agents. Previously, telemetry was split across different log groups, complicating troubleshooting. This enhancement allows developers to correlate traces and logs, apply fine-grained IAM policies, and use customer-managed keys at the individual agent level. Unified observability is enabled by default for new agents and can be configured for existing ones.

  • →Unified observability for Bedrock AgentCore with single log group
  • →Simplified access control and encryption for agent telemetry
  • →Default enablement and configuration for unified observability
Features (1) ›
  • Unified observability for Bedrock AgentCore with single log group

    Agent traces and prompts are now delivered to the same Amazon CloudWatch log group as agent logs, providing unified observability for AI agents. This eliminates the need to search across multiple log groups for debugging agent invocations.

Enhancements (1) ›
  • Simplified access control and encryption for agent telemetry

    The new unified log group allows for applying fine-grained access control and customer-managed key (CMK) encryption at the individual agent level. This enhances security and compliance for agent telemetry data.

Notes (1) ›
  • Default enablement and configuration for unified observability

    New agents created starting July 20, 2026, in supported AWS Regions will use unified observability by default. For existing agents, setting the `UNIFIED_TRACES_DESTINATION_ENABLED=true` environment variable and upgrading ADOT to version 0.17.1 or later enables this feature.

Read the original announcement →

https://aws.amazon.com/about-aws/whats-new/2026/07/amazon-bedrock-agentcore-unified-observability-single-log-group/

Related releases