为 Agent 使用 Bedrock AgentCore 的 Web Search Tool 进行互联网搜索

git clone https://github.com/aobao32/bedrock-agentcore-websearch-demo.git
cd bedrock-agentcore-websearch-demo

REGION="us-east-1"
ROLE_NAME="AgentCoreWebSearchDemoGatewayRole"
ACCOUNT_ID=$(aws sts get-caller-identity --query Account --output text)

aws iam create-role \
  --role-name "$ROLE_NAME" \
  --assume-role-policy-document '{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"Service":"bedrock-agentcore.amazonaws.com"},"Action":"sts:AssumeRole"}]}' \
  --description "AgentCore Web Search demo gateway service role"

aws iam put-role-policy \
  --role-name "$ROLE_NAME" \
  --policy-name "WebSearchInvokePolicy" \
  --policy-document "{
    \"Version\": \"2012-10-17\",
    \"Statement\": [
      {
        \"Sid\": \"InvokeGateway\",
        \"Effect\": \"Allow\",
        \"Action\": \"bedrock-agentcore:InvokeGateway\",
        \"Resource\": \"arn:aws:bedrock-agentcore:${REGION}:${ACCOUNT_ID}:gateway/*\"
      },
      {
        \"Sid\": \"InvokeWebSearch\",
        \"Effect\": \"Allow\",
        \"Action\": \"bedrock-agentcore:InvokeWebSearch\",
        \"Resource\": \"arn:aws:bedrock-agentcore:${REGION}:aws:tool/web-search.v1\"
      }
    ]
  }"

ROLE_ARN=$(aws iam get-role --role-name "$ROLE_NAME" --query Role.Arn --output text)

aws bedrock-agentcore-control create-gateway \
  --name "websearch-demo-gateway" \
  --role-arn "$ROLE_ARN" \
  --protocol-type MCP \
  --authorizer-type AWS_IAM \
  --description "Web Search demo gateway (AWS_IAM inbound auth)" \
  --region "$REGION"

GATEWAY_ID=$(aws bedrock-agentcore-control list-gateways \
  --region "$REGION" \
  --query "items[?name=='websearch-demo-gateway'].gatewayId | [0]" \
  --output text)
echo "$GATEWAY_ID"

aws bedrock-agentcore-control get-gateway \
  --gateway-identifier "$GATEWAY_ID" \
  --region "$REGION" \
  --query '{status:status, gatewayUrl:gatewayUrl}'

---------------------------------------------------------------------------------------------------------------
|                                                 GetGateway                                                  |
+---------------------------------------------------------------------------------------------------+---------+
|                                            gatewayUrl                                             | status  |
+---------------------------------------------------------------------------------------------------+---------+
|  https://websearch-demo-gateway-qg9ea7gi98.gateway.bedrock-agentcore.us-east-1.amazonaws.com/mcp  |  READY  |
+---------------------------------------------------------------------------------------------------+---------+

aws bedrock-agentcore-control create-gateway-target \
  --gateway-identifier "$GATEWAY_ID" \
  --name "web-search" \
  --target-configuration '{"mcp":{"connector":{"source":{"connectorId":"web-search"},"configurations":[{"name":"WebSearch","parameterValues":{}}]}}}' \
  --credential-provider-configurations '[{"credentialProviderType":"GATEWAY_IAM_ROLE"}]' \
  --region "$REGION" \
  --query targetId --output text

aws bedrock-agentcore-control list-gateway-targets \
  --gateway-identifier "$GATEWAY_ID" \
  --region "$REGION" \
  --query "items[?name=='web-search'].{targetId:targetId, status:status}"

[
    {
        "targetId": "IDI5VJDDXF",
        "status": "READY"
    }
]

# MacOS/Linux
curl -LsSf https://astral.sh/uv/install.sh | sh

# 如果是Windows使用如下命令
powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"

cd bedrock-agentcore-websearch-demo/python/
uv sync

# 区域与网关名称
export AWS_REGION="us-east-1" # 与上文保持一致
GATEWAY_NAME="websearch-demo-gateway" # 与上文保持一致

# 按名字取回 Gateway ID
GATEWAY_ID=$(aws bedrock-agentcore-control list-gateways \
  --region "$AWS_REGION" \
  --query "items[?name=='${GATEWAY_NAME}'].gatewayId | [0]" \
  --output text)

# 获取 MCP 端点 URL 并导出
export AGENTCORE_GATEWAY_URL=$(aws bedrock-agentcore-control get-gateway \
  --gateway-identifier "$GATEWAY_ID" \
  --region "$AWS_REGION" \
  --query gatewayUrl --output text)

# 确认导出结果
echo "AWS_REGION=$AWS_REGION"
echo "AGENTCORE_GATEWAY_URL=$AGENTCORE_GATEWAY_URL"

uv run main.py

发现工具：['web-search___WebSearch']
============================================================
AgentCore Web Search 聊天 Agent（Strands）
直接输入问题开始对话；输入 exit / quit 或按 Ctrl-D 退出。
============================================================

你 > 查询 2026 年 6 月最严重的 5 个 CVE 漏洞，用中文介绍每个漏洞情况，每个漏洞信息介绍不超过150个汉字

Agent > 
Tool #1: web-search___WebSearch

Tool #2: web-search___WebSearch
# 2026年6月最严重的5个CVE漏洞

根据安全情报平台 Strobes 发布的《2026年6月最严重5大CVE》报告（综合CVSS评分、EPSS利用概率、CISA KEV在野利用状态等因素），以下为本月最需优先修复的5个漏洞：

## 1. CVE-2026-20253 — Splunk Enterprise 未授权文件写入转RCE
Splunk Enterprise 存在一个未授权的 PostgreSQL 侧车（sidecar）接口，攻击者可任意写入文件。安全公司 watchTowr 在数日内将其转化为预认证远程代码执行（RCE）。该漏洞已被列入 CISA KEV 目录，EPSS 利用概率高达 **88%**，是本月风险最高的漏洞。

## 2. CVE-2026-42271 — LiteLLM AI 网关命令注入
LiteLLM（AI大模型网关）的 MCP 测试接口未正确校验管理员权限，导致任何低权限 API 密钥持有者均可执行主机命令，进而攻陷整个AI网关系统。目前已有公开 PoC 利用代码，EPSS 利用概率约为 **75%**，风险突出。

## 3. CVE-2026-47291 — Windows HTTP.sys 内核态未授权RCE
Windows 内核驱动 HTTP.sys（支撑IIS、WinRM、WCF等服务）存在整数溢出缺陷，攻击者发送超过65535字节的畸形HTTP请求即可触发堆溢出，无需认证即获得SYSTEM权限执行代码。CVSS评分**9.8**，已有公开PoC，已在6月补丁星期二修复。

## 4. CVE-2026-50751 — Check Point VPN 未授权认证绕过
Check Point 远程访问VPN的老旧IKEv1协议路径存在认证绕过漏洞，未授权攻击者可直接绕过登录验证。该漏洞已被列入CISA KEV目录，Check Point证实至少一起攻击事件与Qilin勒索软件团伙有关，实际在野利用可追溯至5月初。

## 5. CVE-2026-33825 — Microsoft Defender“BlueHammer”本地提权
微软Defender自身的恶意软件清除引擎存在TOCTOU（检查时与使用时）竞争条件缺陷，本地低权限用户可利用该漏洞将写入操作重定向至系统目录，从而提升至SYSTEM权限。CISA于6月30日更新KEV记录，确认已有勒索软件团伙利用此漏洞。

---

## 参考来源
- [Top CVEs of June 2026: 5 Critical Flaws to Patch Now](https://strobes.co/blog/top-cves-june-2026-5-critical-flaws-to-patch-now/) — Strobes.co
- [June 2026 Patch Tuesday: 10 Critical Vulnerabilities Amid 219 CVEs](https://feedly.com/cve/security-advisories/microsoft/2026-06-09-june-2026-patch-tuesday-10-critical-vulnerabilities-amid-219-cves) — Feedly
- [CISA Known Exploited Vulnerabilities Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) — CISA

**说明**：本次列表主要参考 Strobes 平台综合CVSS评分、EPSS利用概率及CISA KEV在野利用数据所做的排名。检索到的其他资料（如Oracle、Adobe、Android六月补丁）中也包含多个CVSS 9.8~10.0的严重漏洞，但未见其他权威来源对"2026年6月最严重5个漏洞"给出独立排名，故以上述报告为主要依据整理。

cd bedrock-agentcore-websearch-demo/java
mvn clean package

# 区域与网关名称
export AWS_REGION="us-east-1" # 与上文保持一致
GATEWAY_NAME="websearch-demo-gateway" # 与上文保持一致

# 按名字取回 Gateway ID
GATEWAY_ID=$(aws bedrock-agentcore-control list-gateways \
  --region "$AWS_REGION" \
  --query "items[?name=='${GATEWAY_NAME}'].gatewayId | [0]" \
  --output text)

# 获取 MCP 端点 URL 并导出
export AGENTCORE_GATEWAY_URL=$(aws bedrock-agentcore-control get-gateway \
  --gateway-identifier "$GATEWAY_ID" \
  --region "$AWS_REGION" \
  --query gatewayUrl --output text)

# 确认导出结果
echo "AWS_REGION=$AWS_REGION"
echo "AGENTCORE_GATEWAY_URL=$AGENTCORE_GATEWAY_URL"

java -jar target/agentcore-websearch-java.jar "Amazon的OpenJDK发行版的版本是哪些"

已连接 Gateway：https://websearch-demo-gateway-qg9ea7gi98.gateway.bedrock-agentcore.us-east-1.amazonaws.com/mcp
区域：us-east-1，返回条数上限：10
发现 WebSearch 工具：web-search___WebSearch
正在搜索：Amazon的OpenJDK发行版的版本是哪些

共返回 10 条搜索结果：
============================================================
[1] Amazon Corretto January 2026 Quarterly Updates
    URL: https://aws.amazon.com/about-aws/whats-new/2026/01/amazon-corretto-january-2026-quarterly-updates
    发布日期: 04:00PM, Monday, January 19 2026, PST
    摘要: Amazon Corretto January 2026 Quarterly Updates Posted on: Jan 20, 2026 On January 20, 2026 Amazon announced quarterly security and critical updates for Amazon Corretto Long-Term Supported (LTS) versions of OpenJDK. Corretto 25.0.2, 21.0.10, 17.0.18, 11.0.30, and 8u482 are now available for download. Amazon Corretto is a no-cost, multi-platform, production-ready distribution of OpenJDK.

[2] Amazon Linux 2023
    URL: https://docs.aws.amazon.com/linux/al2023/ug/java.html
    发布日期: 04:00PM, Friday, January 07 2000, PST
    摘要: Corretto is a build of the Open Java Development Kit (OpenJDK) with long-term support from Amazon. Corretto is certified using the Java Technical Compatibility Kit (TCK) to ensure that it meets the Java SE standard and is available on Linux, Windows, and macOS.

......