Extend Claude Code to remote sessions on Amazon Bedrock AgentCore with security controls

This post explains how to run Claude Code as a remote agent on Amazon Bedrock AgentCore runtime, where each task executes in its own isolated microVM session inside your AWS account and returns a GitHub pull request for human review. It walks through the accompanying sample-remote-coding-agent, covering the architecture (API Gateway, Lambda, DynamoDB, SQS, AgentCore runtime) and security controls including Bedrock Guardrails prompt screening, short-lived GitHub tokens via AgentCore Identity, private VPC networking, and least-privilege IAM. The sample suits scoped features, bug fixes, and tests on trusted repositories, but not untrusted code or open-ended work, and the agent never merges pull requests.