# Amazon — How Eon built multi-cloud investigation with an MCP Gateway on Amazon Bedrock AgentCore

- Company: Amazon (amazon.com)
- Announced: 2026-10-20T15:57:57+00:00
- Category: not stated
- Coverage: not counted
- Announcement: no
- Group: routine
- Source: https://aws.amazon.com/blogs/machine-learning/how-eon-built-multi-cloud-investigation-with-an-mcp-gateway-on-amazon-bedrock-agentcore/
- Record: https://forck.live/items/25305-how-eon-built-multi-cloud-investigation-with-an-mcp-gateway-on-amazon-bedrock
- Subject: Bedrock / Nova

Eon replaced per-tool credentials and local Model Context Protocol servers with a single authenticated gateway on Amazon Bedrock AgentCore, giving developers and autonomous agents one front door to investigation tools across AWS, GCP and Azure. The company's engineers investigate production incidents that span container logs, Grafana metrics, GitHub pull requests and cloud-provider health status in a single session, and each new tool previously added another credential to configure, secure and rotate. Eon says new engineers now reach all their investigation tools in about two minutes, down from the roughly two days it took to configure credentials and local MCP servers. The architecture federates corporate single sign-on through Amazon Cognito, which mints the JSON Web Token handed to the gateway, while agents authenticate with Cognito client_credentials grants directly against it. Cedar policies in ENFORCE mode decide which principals can invoke which tools: read operations go to selected groups rather than every authenticated user, write operations are limited to low-impact collaboration actions such as commenting on a pull request or ticket, and production tools are read-only. Eon considered a centralized reverse proxy with custom authentication, but chose AgentCore Gateway because identity separation, cross-account connectivity and policy enforcement came as managed capabilities instead of code it would have to build and maintain.

## Evidence

Verbatim from https://aws.amazon.com/blogs/machine-learning/how-eon-built-multi-cloud-investigation-with-an-mcp-gateway-on-amazon-bedrock-agentcore/:

> New engineers now reach all their investigation tools in about two minutes instead of the two days it previously took to configure credentials and local MCP servers.

---

Record: https://forck.live/items/25305-how-eon-built-multi-cloud-investigation-with-an-mcp-gateway-on-amazon-bedrock
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md