What Shipped on August 6, and Where
AWS's own announcement describes Runtime instances as 'persistent, managed EC2 infrastructure for production AI agents with multi-agent collaboration, GPU support, and sessions lasting up to 14 days.' That figure is the headline change: the AgentCore Runtime microVMs AWS shipped previously cap out at 8 hours per invocation, which is workable for a single task but not for an agent meant to keep working, monitoring, or waiting on external events across days.
Regional availability at launch spans US East (Ohio, N. Virginia), US West (Oregon), Asia Pacific (Mumbai, Singapore, Sydney, Tokyo), and Europe (Frankfurt, Ireland). For any EU organisation that needs agent workloads to keep data processing inside the EU for residency or contractual reasons, the Frankfurt and Ireland availability at launch - rather than months later - is the detail worth noting.
How Agents Actually Talk to Each Other: A Shared Directory, Not an API
AWS's own worked example is concrete: a code-writing agent saves its output to a path like /tmp/agentcore-session/{session-id}/code.py, and a second reviewing agent reads from that identical path using the same session ID, coordinating through the shared file system a runtime instance provides within a session rather than through direct API calls between the two agents.
That is a meaningfully different architecture from the request-response pattern most agent orchestration frameworks use, and it matters beyond convenience. A shared session directory is a shared trust boundary: any agent with write access to that path can, in principle, alter what another agent reads, which is a lateral-movement surface inside what AWS presents as a single isolated session and one that a security review of AgentCore needs to test explicitly rather than assume away.
The Real Shift: AI Compute Now Shows Up on the Bill Like a Server
Pricing for Runtime instances is standard EC2 instance pricing plus an AgentCore orchestration management fee, and AWS's own example configuration - a c7g.2xlarge instance with 8 vCPUs and 16 GiB of memory, running Arm64 or x86_64 Linux - reads like a server specification because it is one. Sessions can be stopped and restarted to avoid paying for idle periods, but a provisioned instance that persists for up to 14 days is a fundamentally different cost object than a stateless inference call billed per token.
For any finance or platform team that has been budgeting generative AI spend purely as an inference-cost line item, this is the point at which agentic AI workloads start behaving like the rest of the compute estate: capacity planning, idle-time management, and instance-type selection all become live budgeting questions again, the same way they were before serverless abstracted them away.
What an EU Buyer Should Check Before Adopting Runtime Instances
Two questions are worth resolving before a production deployment. First, for any workload processing personal or regulated data, confirm that Frankfurt or Ireland availability actually satisfies the organisation's specific residency and processing-location requirements, since regional availability of the service is not automatically the same as a guarantee about where every piece of session data and log output lands.
Second, for any multi-agent deployment using the shared session directory pattern, ask the same question a security team would ask of any shared-filesystem architecture: which agents can write to the shared path, what happens if one agent's output is malicious or corrupted, and whether the isolation AWS provides between separate sessions is the isolation boundary the organisation actually needs between the individual agents running inside one.
Read next: Your DR Plan Assumes the Region Comes Back | MCP Dropped Sessions and Moved Your Model Bill



