Build a multi-account AI agent with AgentCore Gateway and MCP
TL;DR
Build a multi-account architecture that keeps each team's data in its own AWS account while giving AI agents a unified way to query across them. A central platform account runs the agent using Amazon Bedrock AgentCore Gateway and MCP, while line-of-business accounts expose their data as MCP servers with secure cross-account access and fine-grained authorization.
Nauti's Take
MCP arriving in enterprise architectures with clean account separation is real progress: teams keep ownership of their data while agents still get one consistent way in. The risk lies in complexity, because every extra cross-account permission is a potential gap.
Platform teams in larger AWS estates should evaluate the pattern; smaller companies are usually better off with a single account.
Sources
