aws / aws/agentcore-cli

AgentCore provides no information on AWS account or profile being used

Aperta
#2,009 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
bug
Lingua principale
TypeScript
Stelle
283
Fork
95
Merge medio
1g 2h
PR unite (30g)
183

Descrizione

### Description

The AgentCore "getting started" instructions are not clear that "local" development actually accesses AWS, and critically **apparently provides no indication of which AWS account is being used**.

### Steps to Reproduce

Follow the instructions for [Get started with the AgentCore CLI](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-get-started-cli.html):

```bash
agentcore create --name MyAgent --framework Strands --protocol HTTP --model-provider Bedrock --memory none
cd MyAgent
agentcore status
```

Status says:

> AgentCore Status (target: )
>
> Agents
> MyAgent: Local only

Then run:

```bash
agentcore dev
```

Enter a question, e.g.:

> What are the benefits of uv over pip?

### Expected Behavior

1. "Local only" means no server access.
2. If an AWS account is accessed, `agentcore status` should indicate which account is being accessed.

### Actual Behavior

1. An error occurred, which apparently means that "local only" is not "local only".
> Error: An error occurred (AccessDeniedException) when calling the ConverseStream operation: Your account is currently being verified. Verification normally takes less than 2 hours. Until your account is verified, you may not have access to this operation. If you are still receiving this message after more than 2 hours, please let us know by writing to [aws-verification@amazon.com](mailto:aws-verification@amazon.com). We appreciate your patience.
2. There is no information about which AWS account is being accessed, and no obvious way to find out.

### CLI Version

0.27.0

### Operating System

Windows

### Additional Context

AWS best practices requires setting up multiple accounts. Users need to be able to know which account is being accessed. This issue is a compounding of the critical oversight of #1727: the `--profile` switch is not implemented, and it's not even clear if `AWS_PROFILE` is supported. Therefore, when the "local" setup tries to access something that isn't local, users need to know what it's trying to access.

1. Improve the documentation to explain that "local" (apparently) only refers to the agent harness; an AWS account is still being accessed.
2. Implement `--profile` and `AWS_PROFILE` from #1727.
3. Provide visibility in `agentcore status` to indicate which profile is being resolved.

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

Inizia dai punti di ingresso status/dev di AgentCore CLI e dalla documentazione CLI introduttiva collegata nell’issue; esamina #1727 per il contesto sul supporto dei profili. Il lavoro è completato quando la documentazione spiega l’accesso locale ad AWS e status identifica l’account o il profilo risolto, con il comportamento verificato rispetto al flusso Windows segnalato.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Stack tecnologico
aws, typescript
Ambito
cli, cloud, documentation
Tipo di issue
Bug
Difficoltà
4/5
Tempo stimato
3-5 giorni
Stato di attività
Tranquilla
Chiarezza
Abbastanza chiara
Idoneità per principianti
38/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.