Bedrock Agents & Action Groups
A financial services company is building an AI assistant using Amazon Bedrock Agents that can check account balances, transfer funds between accounts, and generate monthly spending reports. The assistant must verify the user's identity before performing any financial transaction but should allow spending report generation without additional verification. The developer needs to implement this with the least operational overhead. Which architecture should the developer implement?
A single Bedrock Agent with separate action groups provides clean separation of concerns. Each action group has its own Lambda function and OpenAPI schema, allowing the developer to implement identity verification in the transaction-related Lambda functions while keeping the report generation Lambda simple. This is the least operational overhead approach that properly enforces security at the execution layer.