An AWS Machine Learning blog covers hosting coding agents on Amazon Bedrock AgentCore Runtime: each session gets a Firecracker microVM, /mnt/workspace survives idle, agentcore exec --it provides a real PTY, and Gateway MCP keeps GitHub/Jira tokens out of the VM. Run Claude Code, Codex, Kiro, and Cursor in isolation without localhost port fights.

Key Takeaways

  • Isolation: per-session Firecracker microVM with persistent /mnt/workspace.
  • Security: Gateway MCP holds GitHub/Jira tokens outside the VM.
  • Use case: race Claude Code / Codex / Kiro / Cursor on the same issue.
ADSponsored