Domain and publish date filters for Web Search on AgentCore

Amazon Bedrock's Web Search on AgentCore has introduced new runtime filtering features that allow developers to specify which web domains to include or exclude and to set publication date ranges for search results, all enforced server-side. These filters provide granular, per-call control over the sources and recency of web content used by AI agents, addressing real-world needs such as compliance, content relevance, and dynamic source policies.

The new capabilities are part of connector version 1.2.0 and include two main features: domain filtering, where include (allowlist) and exclude (denylist) lists of up to 100 domains can be specified for each request, and published-date filtering, which restricts results to content published within specified ISO-8601 UTC bounds. These filters are combined with existing enterprise policies in a layered approach, ensuring that runtime restrictions can only narrow, not expand, the scope defined by administrators.

The filtering process is entirely server-side, with the request lifecycle involving merging runtime filters with admin policies, executing the filtered query within AWS infrastructure, and returning only verified results. This architecture supports compliance and security, especially for regulated industries, by preventing data egress outside AWS and ensuring strict enforcement.

The update also expands regional access to Europe (Ireland) and Asia Pacific (Tokyo), reducing latency and supporting data proximity requirements for organizations in these regions. The new features are compatible with existing API calls and SDKs, and are available today in the specified regions, supporting organizations in building trustworthy, policy-compliant AI agents with real-time web data access.