akeyless-agentcore-runtime 0.2.0__tar.gz

akeyless_agentcore_runtime-0.2.0/.env.example

@@ -0,0 +1,17 @@
+# Bootstrap — only Akeyless auth config, NOT application secrets
+AKEYLESS_ACCESS_ID=p-xxxxxxxxxxxx
+AKEYLESS_ACCESS_TYPE=aws_iam
+AKEYLESS_GATEWAY_URL=https://api.akeyless.io
+
+# Secret path prefix for this agent (recommended)
+AKEYLESS_SECRET_PREFIX=/bedrock-agentcore/my-agent/production
+AGENTCORE_AGENT_NAME=my-agent
+AKEYLESS_ENV=production
+
+# Optional tuning
+# AKEYLESS_SECRET_CACHE_TTL_SECONDS=300
+# AKEYLESS_TOKEN_EXPIRY_MARGIN_SECONDS=60
+
+# Local development only — use access_key instead of aws_iam
+# AKEYLESS_ACCESS_TYPE=access_key
+# AKEYLESS_ACCESS_KEY=your-access-key

akeyless_agentcore_runtime-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,23 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.10", "3.12"]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - run: pip install -e ".[dev]"
+      - run: pytest

akeyless_agentcore_runtime-0.2.0/.github/workflows/publish.yml

@@ -0,0 +1,23 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  id-token: write
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - run: pip install build
+      - run: python -m build
+
+      - uses: pypa/gh-action-pypi-publish@release/v1

akeyless_agentcore_runtime-0.2.0/.gitignore

@@ -0,0 +1,31 @@
+# Python
+__pycache__/
+*.py[cod]
+*.egg-info/
+.eggs/
+dist/
+build/
+*.egg
+.venv/
+venv/
+.env
+.env.local
+.env.*.local
+
+# Testing / tooling
+.pytest_cache/
+.coverage
+htmlcov/
+.mypy_cache/
+.ruff_cache/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+.DS_Store
+
+# AgentCore local artifacts
+agentcore/
+.gateway_config.json
+gateway_config.json

akeyless_agentcore_runtime-0.2.0/CONTRIBUTING.md

@@ -0,0 +1,48 @@
+# Contributing
+
+Thanks for contributing to `akeyless-agentcore-runtime`.
+
+## Development setup
+
+Requires Python 3.10+.
+
+```bash
+git clone https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git
+cd bedrock-agentcore-akeyless-runtime
+python3 -m venv .venv
+source .venv/bin/activate
+pip install -e ".[dev]"
+pytest
+```
+
+## Optional extras
+
+```bash
+pip install -e ".[mcp]"       # MCP server tools
+pip install -e ".[strands]"   # Strands in-process tools
+pip install -e ".[gateway]"   # AgentCore Gateway Lambda setup
+pip install -e ".[all]"       # everything
+```
+
+## Pull requests
+
+1. Fork and create a feature branch from `main`.
+2. Add or update tests for behavior changes.
+3. Run `pytest` before opening the PR.
+4. Do not commit real credentials, `.env` files, or gateway tokens.
+5. Keep changes focused — this package should stay small and dependency-light.
+
+## Publishing (maintainers)
+
+### PyPI (recommended for end users)
+
+1. Configure [trusted publishing](https://docs.pypi.org/trusted-publishers/) on PyPI for this GitHub repo
+2. Create a GitHub Release (e.g. `v0.2.0`) — the `publish.yml` workflow uploads automatically
+
+Manual fallback:
+
+```bash
+pip install build twine
+python -m build
+twine upload dist/*
+```

akeyless_agentcore_runtime-0.2.0/LICENSE

@@ -0,0 +1,19 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   Copyright 2026 Akeyless Community
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

akeyless_agentcore_runtime-0.2.0/PKG-INFO

@@ -0,0 +1,257 @@
+Metadata-Version: 2.4
+Name: akeyless-agentcore-runtime
+Version: 0.2.0
+Summary: Fetch Akeyless secrets at runtime on AWS Bedrock AgentCore using cloud identity authentication
+Project-URL: Homepage, https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime
+Project-URL: Repository, https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime
+Author: Akeyless Community
+License-Expression: Apache-2.0
+License-File: LICENSE
+Keywords: agentcore,akeyless,aws,bedrock,runtime,secrets
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Security
+Requires-Python: >=3.10
+Requires-Dist: akeyless-cloud-id>=0.3.1
+Requires-Dist: akeyless>=5.0.0
+Provides-Extra: all
+Requires-Dist: bedrock-agentcore-starter-toolkit>=0.1.0; extra == 'all'
+Requires-Dist: mcp>=1.9.0; extra == 'all'
+Requires-Dist: strands-agents>=0.1.0; extra == 'all'
+Provides-Extra: dev
+Requires-Dist: pytest-cov>=5.0.0; extra == 'dev'
+Requires-Dist: pytest>=8.0.0; extra == 'dev'
+Provides-Extra: gateway
+Requires-Dist: bedrock-agentcore-starter-toolkit>=0.1.0; extra == 'gateway'
+Provides-Extra: mcp
+Requires-Dist: mcp>=1.9.0; extra == 'mcp'
+Provides-Extra: strands
+Requires-Dist: strands-agents>=0.1.0; extra == 'strands'
+Description-Content-Type: text/markdown
+
+# akeyless-agentcore-runtime
+
+Fetch [Akeyless](https://www.akeyless.io) secrets at **runtime** on [AWS Bedrock AgentCore](https://aws.amazon.com/bedrock/agentcore/). Authenticate with **cloud identity** (AWS IAM) — no long-lived API keys in your agent deployment. Application secrets stay in Akeyless, not AWS Secrets Manager.
+
+**Repository:** [github.com/akeyless-community/bedrock-agentcore-akeyless-runtime](https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime)
+
+## Documentation
+
+| Guide | Description |
+|-------|-------------|
+| **[Installation](docs/INSTALL.md)** | **pip install — no git clone required** |
+| [Akeyless setup](docs/AKEYLESS_SETUP.md) | Auth method, RBAC, secret paths — do this first |
+| [Deployment patterns](docs/DEPLOYMENT.md) | In-agent fetch, hybrid, MCP server, Gateway Lambda |
+| [Examples](examples/README.md) | Runnable sample agents |
+| [Security](SECURITY.md) | Production checklist and reporting |
+| [Contributing](CONTRIBUTING.md) | Development setup and PR guidelines |
+
+## Why this integration?
+
+| Concern | AWS default pattern | This integration |
+|---------|--------------------|------------------|
+| **Authentication to secrets platform** | IAM role → Secrets Manager | IAM role → Akeyless (AWS IAM auth method) |
+| **Secret storage** | AWS Secrets Manager | Akeyless (static, dynamic, rotated) |
+| **Bootstrap credentials** | None (IAM only) | Only `AKEYLESS_ACCESS_ID` (no secret key) |
+| **Rotation & governance** | Secrets Manager policies | Akeyless RBAC, rotation, audit |
+
+AgentCore Runtime provides an IAM execution role with ambient AWS credentials. This library uses those credentials to generate an Akeyless **cloud ID** and authenticate — the same pattern used by EKS, Lambda, and other Akeyless integrations.
+
+## Install
+
+**No git clone needed.** Add to your agent project and install with pip.
+
+### From PyPI (when published)
+
+```bash
+pip install akeyless-agentcore-runtime
+```
+
+### From GitHub (available now)
+
+```bash
+pip install "akeyless-agentcore-runtime @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0"
+```
+
+Add to your AgentCore `requirements.txt`:
+
+```text
+akeyless-agentcore-runtime @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0
+bedrock-agentcore>=0.1.0
+```
+
+Full install guide (extras, MCP CLI, verification): **[docs/INSTALL.md](docs/INSTALL.md)**
+
+Optional extras:
+
+```bash
+pip install "akeyless-agentcore-runtime[strands] @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0"
+pip install "akeyless-agentcore-runtime[mcp] @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0"
+pip install "akeyless-agentcore-runtime[gateway] @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0"
+pip install "akeyless-agentcore-runtime[all] @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0"
+```
+
+Requires **Python 3.10+**.
+
+## Quick start
+
+### 1. Configure Akeyless
+
+Follow the full guide: **[docs/AKEYLESS_SETUP.md](docs/AKEYLESS_SETUP.md)**
+
+Summary:
+
+1. Create an **AWS IAM Auth Method** bound to your AgentCore execution role ARN
+2. Grant read/list on `/bedrock-agentcore/<agent>/<env>/*`
+3. Store secrets in Akeyless (not in AgentCore env vars)
+
+### 2. Set bootstrap env vars on AgentCore
+
+Configure only auth + path prefix — **not** application secrets:
+
+| Variable | Required | Example |
+|----------|----------|---------|
+| `AKEYLESS_ACCESS_ID` | Yes | `p-xxxxx` |
+| `AKEYLESS_ACCESS_TYPE` | No (default: `aws_iam`) | `aws_iam` |
+| `AKEYLESS_SECRET_PREFIX` | Recommended | `/bedrock-agentcore/my-agent/production` |
+| `AKEYLESS_GATEWAY_URL` | No | `https://api.akeyless.io` |
+| `AGENTCORE_AGENT_NAME` | No | `my-agent` |
+
+### 3. Fetch a secret in your agent
+
+```python
+from akeyless_agentcore import get_secret_sync
+
+api_key = get_secret_sync("OPENAI_API_KEY")
+```
+
+### 4. Deploy
+
+```bash
+pip install akeyless-agentcore-runtime bedrock-agentcore
+agentcore deploy
+```
+
+See [examples/strands-agent/](examples/strands-agent/) for a complete agent.
+
+## In-agent fetch vs AgentCore tools
+
+Use **both** in production — they solve different problems:
+
+| Pattern | When to use | Example |
+|---------|-------------|---------|
+| **In-agent fetch** | Bootstrap secrets on every invocation; no tool-call overhead | Model API key at cold start |
+| **AgentCore tools** | Agent decides which secret to fetch; shared across agents | `get_akeyless_secret("DATABASE_URL")` on demand |
+| **Hybrid (recommended)** | Bootstrap + on-demand | [examples/hybrid-agent/](examples/hybrid-agent/) |
+
+```python
+from akeyless_agentcore import get_secret_sync
+from akeyless_agentcore.tools.strands import create_strands_tools
+
+api_key = get_secret_sync("OPENAI_API_KEY")          # bootstrap
+agent = Agent(model=model, tools=create_strands_tools())  # on-demand
+```
+
+### Tool deployment options
+
+| Deployment | Install extra | Use case |
+|------------|---------------|----------|
+| In-process Strands tools | `[strands]` | Tools in the same agent process |
+| MCP server on AgentCore Runtime | `[mcp]` | Dedicated secrets MCP endpoint |
+| Gateway Lambda target | `[gateway]` | Shared tools via AgentCore Gateway |
+
+| Tool | Returns values? | Description |
+|------|----------------|-------------|
+| `list_akeyless_secrets` | No | Discover secret names under a prefix |
+| `get_akeyless_secret` | Yes | Fetch static, dynamic, or rotated secret |
+
+Full details: **[docs/DEPLOYMENT.md](docs/DEPLOYMENT.md)**
+
+## API reference
+
+### Convenience functions
+
+```python
+from akeyless_agentcore import get_secret_sync, get_secret
+
+api_key = get_secret_sync("OPENAI_API_KEY")
+api_key = await get_secret("OPENAI_API_KEY")  # async
+```
+
+### Client
+
+```python
+from akeyless_agentcore import AkeylessRuntimeClient
+
+client = AkeylessRuntimeClient(
+    gateway_url="https://api.akeyless.io",
+    secret_prefix="/bedrock-agentcore/my-agent/production",
+    access_id="p-xxxxx",
+    access_type="aws_iam",
+)
+
+client.get_secret_sync("OPENAI_API_KEY")
+client.get_secret_json_sync("APP_CONFIG")
+client.get_dynamic_secret_sync("aws-creds")
+client.get_rotated_secret_sync("api-key")
+client.list_secrets_sync()
+```
+
+## Authentication
+
+| Method | `AKEYLESS_ACCESS_TYPE` | Additional env |
+|--------|------------------------|----------------|
+| **AWS IAM (recommended)** | `aws_iam` | `AKEYLESS_ACCESS_ID` |
+| Access key | `access_key` | `AKEYLESS_ACCESS_ID`, `AKEYLESS_ACCESS_KEY` |
+| API key | `api_key` | `AKEYLESS_ACCESS_ID`, `AKEYLESS_ACCESS_KEY` |
+| Universal Identity | `universal_identity` | `AKEYLESS_UID_TOKEN` |
+| JWT | `jwt` | `AKEYLESS_ACCESS_ID`, `AKEYLESS_JWT` |
+| Pre-authenticated | — | `AKEYLESS_TOKEN` |
+
+## Architecture
+
+```mermaid
+sequenceDiagram
+    participant Agent as AgentCore Runtime
+    participant Lib as akeyless-agentcore-runtime
+    participant AWS as AWS STS/IAM
+    participant AKL as Akeyless Gateway
+
+    Agent->>Lib: get_secret_sync("OPENAI_API_KEY")
+    Lib->>AWS: Generate cloud ID (SigV4 GetCallerIdentity)
+    AWS-->>Lib: Signed identity proof
+    Lib->>AKL: POST /auth (access_id, aws_iam, cloud_id)
+    AKL-->>Lib: Session token
+    Lib->>AKL: GET /get-secret-value
+    AKL-->>Lib: Secret value
+    Lib-->>Agent: OPENAI_API_KEY
+```
+
+## Local development
+
+```bash
+cp .env.example .env   # edit with your test credentials — never commit .env
+
+export AKEYLESS_ACCESS_ID=p-xxxxx
+export AKEYLESS_ACCESS_TYPE=access_key
+export AKEYLESS_ACCESS_KEY=your-readonly-key
+export AKEYLESS_SECRET_PREFIX=/bedrock-agentcore/my-agent/dev
+
+python3 -c "from akeyless_agentcore import get_secret_sync; print(get_secret_sync('OPENAI_API_KEY')[:8] + '...')"
+```
+
+## Related community projects
+
+- [netlify-akeyless-runtime](https://github.com/akeyless-community/netlify-runtime) — Netlify Functions
+- [fly-akeyless-runtime](https://github.com/akeyless-community/fly-runtime) — Fly.io Machines
+- [vercel-akeyless-runtime](https://github.com/akeyless-community/vercel-runtime) — Vercel serverless
+- [heroku-akeyless-runtime](https://github.com/akeyless-community/heroku-runtime) — Heroku dynos
+
+## License
+
+Apache-2.0

akeyless_agentcore_runtime-0.2.0/README.md

@@ -0,0 +1,221 @@
+# akeyless-agentcore-runtime
+
+Fetch [Akeyless](https://www.akeyless.io) secrets at **runtime** on [AWS Bedrock AgentCore](https://aws.amazon.com/bedrock/agentcore/). Authenticate with **cloud identity** (AWS IAM) — no long-lived API keys in your agent deployment. Application secrets stay in Akeyless, not AWS Secrets Manager.
+
+**Repository:** [github.com/akeyless-community/bedrock-agentcore-akeyless-runtime](https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime)
+
+## Documentation
+
+| Guide | Description |
+|-------|-------------|
+| **[Installation](docs/INSTALL.md)** | **pip install — no git clone required** |
+| [Akeyless setup](docs/AKEYLESS_SETUP.md) | Auth method, RBAC, secret paths — do this first |
+| [Deployment patterns](docs/DEPLOYMENT.md) | In-agent fetch, hybrid, MCP server, Gateway Lambda |
+| [Examples](examples/README.md) | Runnable sample agents |
+| [Security](SECURITY.md) | Production checklist and reporting |
+| [Contributing](CONTRIBUTING.md) | Development setup and PR guidelines |
+
+## Why this integration?
+
+| Concern | AWS default pattern | This integration |
+|---------|--------------------|------------------|
+| **Authentication to secrets platform** | IAM role → Secrets Manager | IAM role → Akeyless (AWS IAM auth method) |
+| **Secret storage** | AWS Secrets Manager | Akeyless (static, dynamic, rotated) |
+| **Bootstrap credentials** | None (IAM only) | Only `AKEYLESS_ACCESS_ID` (no secret key) |
+| **Rotation & governance** | Secrets Manager policies | Akeyless RBAC, rotation, audit |
+
+AgentCore Runtime provides an IAM execution role with ambient AWS credentials. This library uses those credentials to generate an Akeyless **cloud ID** and authenticate — the same pattern used by EKS, Lambda, and other Akeyless integrations.
+
+## Install
+
+**No git clone needed.** Add to your agent project and install with pip.
+
+### From PyPI (when published)
+
+```bash
+pip install akeyless-agentcore-runtime
+```
+
+### From GitHub (available now)
+
+```bash
+pip install "akeyless-agentcore-runtime @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0"
+```
+
+Add to your AgentCore `requirements.txt`:
+
+```text
+akeyless-agentcore-runtime @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0
+bedrock-agentcore>=0.1.0
+```
+
+Full install guide (extras, MCP CLI, verification): **[docs/INSTALL.md](docs/INSTALL.md)**
+
+Optional extras:
+
+```bash
+pip install "akeyless-agentcore-runtime[strands] @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0"
+pip install "akeyless-agentcore-runtime[mcp] @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0"
+pip install "akeyless-agentcore-runtime[gateway] @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0"
+pip install "akeyless-agentcore-runtime[all] @ git+https://github.com/akeyless-community/bedrock-agentcore-akeyless-runtime.git@v0.2.0"
+```
+
+Requires **Python 3.10+**.
+
+## Quick start
+
+### 1. Configure Akeyless
+
+Follow the full guide: **[docs/AKEYLESS_SETUP.md](docs/AKEYLESS_SETUP.md)**
+
+Summary:
+
+1. Create an **AWS IAM Auth Method** bound to your AgentCore execution role ARN
+2. Grant read/list on `/bedrock-agentcore/<agent>/<env>/*`
+3. Store secrets in Akeyless (not in AgentCore env vars)
+
+### 2. Set bootstrap env vars on AgentCore
+
+Configure only auth + path prefix — **not** application secrets:
+
+| Variable | Required | Example |
+|----------|----------|---------|
+| `AKEYLESS_ACCESS_ID` | Yes | `p-xxxxx` |
+| `AKEYLESS_ACCESS_TYPE` | No (default: `aws_iam`) | `aws_iam` |
+| `AKEYLESS_SECRET_PREFIX` | Recommended | `/bedrock-agentcore/my-agent/production` |
+| `AKEYLESS_GATEWAY_URL` | No | `https://api.akeyless.io` |
+| `AGENTCORE_AGENT_NAME` | No | `my-agent` |
+
+### 3. Fetch a secret in your agent
+
+```python
+from akeyless_agentcore import get_secret_sync
+
+api_key = get_secret_sync("OPENAI_API_KEY")
+```
+
+### 4. Deploy
+
+```bash
+pip install akeyless-agentcore-runtime bedrock-agentcore
+agentcore deploy
+```
+
+See [examples/strands-agent/](examples/strands-agent/) for a complete agent.
+
+## In-agent fetch vs AgentCore tools
+
+Use **both** in production — they solve different problems:
+
+| Pattern | When to use | Example |
+|---------|-------------|---------|
+| **In-agent fetch** | Bootstrap secrets on every invocation; no tool-call overhead | Model API key at cold start |
+| **AgentCore tools** | Agent decides which secret to fetch; shared across agents | `get_akeyless_secret("DATABASE_URL")` on demand |
+| **Hybrid (recommended)** | Bootstrap + on-demand | [examples/hybrid-agent/](examples/hybrid-agent/) |
+
+```python
+from akeyless_agentcore import get_secret_sync
+from akeyless_agentcore.tools.strands import create_strands_tools
+
+api_key = get_secret_sync("OPENAI_API_KEY")          # bootstrap
+agent = Agent(model=model, tools=create_strands_tools())  # on-demand
+```
+
+### Tool deployment options
+
+| Deployment | Install extra | Use case |
+|------------|---------------|----------|
+| In-process Strands tools | `[strands]` | Tools in the same agent process |
+| MCP server on AgentCore Runtime | `[mcp]` | Dedicated secrets MCP endpoint |
+| Gateway Lambda target | `[gateway]` | Shared tools via AgentCore Gateway |
+
+| Tool | Returns values? | Description |
+|------|----------------|-------------|
+| `list_akeyless_secrets` | No | Discover secret names under a prefix |
+| `get_akeyless_secret` | Yes | Fetch static, dynamic, or rotated secret |
+
+Full details: **[docs/DEPLOYMENT.md](docs/DEPLOYMENT.md)**
+
+## API reference
+
+### Convenience functions
+
+```python
+from akeyless_agentcore import get_secret_sync, get_secret
+
+api_key = get_secret_sync("OPENAI_API_KEY")
+api_key = await get_secret("OPENAI_API_KEY")  # async
+```
+
+### Client
+
+```python
+from akeyless_agentcore import AkeylessRuntimeClient
+
+client = AkeylessRuntimeClient(
+    gateway_url="https://api.akeyless.io",
+    secret_prefix="/bedrock-agentcore/my-agent/production",
+    access_id="p-xxxxx",
+    access_type="aws_iam",
+)
+
+client.get_secret_sync("OPENAI_API_KEY")
+client.get_secret_json_sync("APP_CONFIG")
+client.get_dynamic_secret_sync("aws-creds")
+client.get_rotated_secret_sync("api-key")
+client.list_secrets_sync()
+```
+
+## Authentication
+
+| Method | `AKEYLESS_ACCESS_TYPE` | Additional env |
+|--------|------------------------|----------------|
+| **AWS IAM (recommended)** | `aws_iam` | `AKEYLESS_ACCESS_ID` |
+| Access key | `access_key` | `AKEYLESS_ACCESS_ID`, `AKEYLESS_ACCESS_KEY` |
+| API key | `api_key` | `AKEYLESS_ACCESS_ID`, `AKEYLESS_ACCESS_KEY` |
+| Universal Identity | `universal_identity` | `AKEYLESS_UID_TOKEN` |
+| JWT | `jwt` | `AKEYLESS_ACCESS_ID`, `AKEYLESS_JWT` |
+| Pre-authenticated | — | `AKEYLESS_TOKEN` |
+
+## Architecture
+
+```mermaid
+sequenceDiagram
+    participant Agent as AgentCore Runtime
+    participant Lib as akeyless-agentcore-runtime
+    participant AWS as AWS STS/IAM
+    participant AKL as Akeyless Gateway
+
+    Agent->>Lib: get_secret_sync("OPENAI_API_KEY")
+    Lib->>AWS: Generate cloud ID (SigV4 GetCallerIdentity)
+    AWS-->>Lib: Signed identity proof
+    Lib->>AKL: POST /auth (access_id, aws_iam, cloud_id)
+    AKL-->>Lib: Session token
+    Lib->>AKL: GET /get-secret-value
+    AKL-->>Lib: Secret value
+    Lib-->>Agent: OPENAI_API_KEY
+```
+
+## Local development
+
+```bash
+cp .env.example .env   # edit with your test credentials — never commit .env
+
+export AKEYLESS_ACCESS_ID=p-xxxxx
+export AKEYLESS_ACCESS_TYPE=access_key
+export AKEYLESS_ACCESS_KEY=your-readonly-key
+export AKEYLESS_SECRET_PREFIX=/bedrock-agentcore/my-agent/dev
+
+python3 -c "from akeyless_agentcore import get_secret_sync; print(get_secret_sync('OPENAI_API_KEY')[:8] + '...')"
+```
+
+## Related community projects
+
+- [netlify-akeyless-runtime](https://github.com/akeyless-community/netlify-runtime) — Netlify Functions
+- [fly-akeyless-runtime](https://github.com/akeyless-community/fly-runtime) — Fly.io Machines
+- [vercel-akeyless-runtime](https://github.com/akeyless-community/vercel-runtime) — Vercel serverless
+- [heroku-akeyless-runtime](https://github.com/akeyless-community/heroku-runtime) — Heroku dynos
+
+## License
+
+Apache-2.0

akeyless_agentcore_runtime-0.2.0/SECURITY.md

@@ -0,0 +1,21 @@
+# Security Policy
+
+## Reporting vulnerabilities
+
+Report security issues to [security@akeyless.io](mailto:security@akeyless.io). Do not open public GitHub issues for vulnerabilities.
+
+## Design principles
+
+1. **No application secrets in environment variables** — only bootstrap auth config (`AKEYLESS_ACCESS_ID`, gateway URL, path prefix).
+2. **Cloud identity by default** — `aws_iam` uses the AgentCore execution role; no long-lived Akeyless access keys in production.
+3. **Secrets never logged** — the client returns values to your code only; do not log secret contents.
+4. **In-memory caching** — secrets are cached in process memory with a configurable TTL. Use `ignore_cache=True` for highly sensitive one-time values.
+5. **Least privilege** — bind the Akeyless auth method to the specific AgentCore execution role ARN and restrict to the agent's secret path prefix.
+
+## Production checklist
+
+- [ ] Use `AKEYLESS_ACCESS_TYPE=aws_iam` (not `access_key`)
+- [ ] Akeyless auth method bound to AgentCore execution role ARN only
+- [ ] Read-only RBAC on `/bedrock-agentcore/<agent>/<env>/*`
+- [ ] No secrets in `agentcore/aws-targets.json` or CloudFormation templates
+- [ ] Gateway URL points to your organization's Akeyless gateway (not a shared dev gateway)