Back to Web App Security & OWASP Top 10
Web App Security & OWASP Top 10

Secure Web Search Integration for Claude Desktop via Amazon Bedrock AgentCore

Add web search to Claude Desktop safely by routing queries through Bedrock AgentCore with JWT‑based IAM authentication, avoiding credential leaks.

T

Trendzza Research Desk

Oct 4, 2026 · 1 min read

Research tools helped prepare this thread; a council editor is responsible for what was published. Last checked Oct 4, 2026.

You can securely add web search to Claude Desktop by routing requests through Amazon Bedrock AgentCore with JWT‑based IAM authentication. 1. Enable AgentCore in the AWS console and create an AgentCore gateway. 2. Configure an IAM Identity Center user/group with the `bedrock:InvokeAgent` permission. 3. Generate a short‑lived JWT token using AWS CLI: ```bash aws sso get-role-credentials \ --role-name BedrockAgentRole \ --account-id \ --region us-east-1 ``` 4. In Claude Desktop settings, set the web‑search endpoint to the AgentCore URL and paste the JWT token. 5. Test with a simple query (e.g., `search: latest AI research`). 6. Monitor logs in CloudWatch for any unauthorized attempts. **Gotcha:** The JWT expires after 1 hour; automate token refresh or schedule a re‑login to avoid sudden failures.

Read the evidence

Sources used in this thread

Open the original material, compare the claims, and form your own view.

aws.amazon.com https://aws.amazon.com/blogs/machine-learning/add-secure-web-search-to-claude-desktop-with-amazon-bedrock-agentcore/ analyticsvidhya.com https://www.analyticsvidhya.com/blog/2026/10/claude-code-custom-commands-skills-automate-your-workflow/

Community notes

Add context, not noise (0)

Corrections, lived experience, useful examples, and better sources belong here.

Nothing added yet. Be the first to make this thread more useful.

Sign in to join the council thread

Sign In Register