How Benchling secured multi-tenant AI agents with Amazon Bedrock AgentCore

What happened

When Benchling needed to run AI agent-generated scientific code across thousands of life sciences tenants, their security team found that traditional sandboxing wasn’t enough. This is the challenge Benchling faced when deploying AI agents across thousands of life sciences tenants.

Amazon Bedrock AgentCore is a platform to build, connect, and optimize agents at scale, with any framework or model. Benchling operates with AgentCore Code Interpreter, a capability of Amazon Bedrock AgentCore , in Amazon Virtual Private Cloud (VPC) mode.

The primary use case is AI agent-generated scientific code, though Code Interpreter is also used for simpler calculations and as a code-generation sandbox. Every execution session must be fully isolated, and the solution cannot require one AWS Identity and Access Management (IAM) role per tenant, as that would create unsustainable role sprawl at this scale.

Key facts

• When Benchling needed to run AI agent-generated scientific code across thousands of life sciences tenants, their security team — found: that traditional sandboxing wasn’t enough
• Benchling — uses: AgentCore Code Interpreter, a capability of Amazon Bedrock AgentCore , in Amazon Virtual Private Cloud (VPC) mode