Skip to content

Operating Agents in Production

This guide provides best practices for deploying Strands agents in production environments, focusing on security, stability, and performance optimization.

When transitioning from development to production, it’s essential to configure your agents for optimal performance, security, and reliability. The following sections outline key considerations and recommended settings.

For production deployments, initialize your agents with explicit configurations tailored to your production requirements rather than relying on defaults.

For example, passing in models with specific configuration properties:

agent_model = BedrockModel(
model_id="us.amazon.nova-premier-v1:0",
temperature=0.3,
max_tokens=2000,
top_p=0.8,
)
agent = Agent(model=agent_model)

See:

In production environments, it’s critical to control which tools are available to your agent. You should:

  • Explicitly Specify Tools: Always provide an explicit list of tools rather than loading all available tools
  • Keep Automatic Tool Loading Disabled: For stability in production, keep automatic loading and reloading of tools disabled (the default behavior)
  • Audit Tool Usage: Regularly review which tools are being used and remove any that aren’t necessary for your use case
agent = Agent(
...,
# Explicitly specify tools
tools=[weather_research, weather_analysis, summarizer],
# Automatic tool loading is disabled by default (recommended for production)
# load_tools_from_directory=False, # This is the default
)

See Adding Tools to Agents and Auto reloading tools for more information.

For production environments:

  1. Tool Permissions: Review and restrict the permissions of each tool to follow the principle of least privilege
  2. Input Validation: Always validate user inputs before passing to Strands Agents
  3. Output Sanitization: Sanitize outputs for sensitive information. Consider leveraging guardrails as an automated mechanism.

Every production agent should have explicit execution boundaries. Choose limits that match the request’s service-level objective and cost budget, then monitor how often each limit is reached. A useful baseline covers four independent dimensions:

  1. Agent loop iterations: Set per-invocation turn limits by passing limits, which is named the same in both SDKs. A turn limit bounds repeated model and tool cycles and prevents an agent from running indefinitely.
  2. Tool invocations: Put quotas around tools that are costly, rate-limited, or have side effects. The Limit Tool Counts hook shows the same pattern for Python and TypeScript and resets counts for each invocation.
  3. Token consumption: Use the invocation’s total-token and output-token limits for an end-to-end budget. Also configure the model’s max_tokensmaxTokens setting to cap a single response. Invocation token limits are checked between turns, so one model call can exceed the configured total before the loop stops.
  4. Wall-clock time: Enforce a deadline outside the invocation and cancel the agent when it expires. Python can call agent.cancel() from a watchdog; TypeScript can pass a cancelSignal to invoke()/stream() (for example, AbortSignal.timeout(30_000)) or call agent.cancel(). Cancellation is cooperative for work already running inside a tool, so propagate the same deadline to downstream network calls and blocking operations.

See Invocation Limits for turn and token budgets, Cancellation for timeout patterns, and Stop Reasons for handling exhausted limits as expected outcomes rather than generic errors.

Apply limits at both the orchestrator and node levels:

  • Swarm: Bound handoffs/iterations and total/per-node execution time in Python; use maxSteps, timeout, and nodeTimeout in TypeScript. See Swarm Safety Mechanisms.
  • Graph: Bound total node executions and total/per-node execution time. The exact configuration names differ by SDK; see Graph Components.

Do not rely on only one boundary. For example, a turn limit does not constrain a single slow tool, while a timeout alone does not provide a predictable token budget.

Optimize memory usage and context window management in production:

from strands import Agent
from strands.agent.conversation_manager import SlidingWindowConversationManager
# Configure conversation management for production
conversation_manager = SlidingWindowConversationManager(
window_size=10, # Limit history size
)
agent = Agent(
...,
conversation_manager=conversation_manager
)

The SlidingWindowConversationManager helps prevent context window overflow exceptions by maintaining a reasonable conversation history size.

For improved user experience in production applications, leverage streaming via stream_async() to deliver content to the caller as it’s received, resulting in a lower-latency experience:

# For web applications
async def stream_agent_response(prompt):
agent = Agent(...)
...
async for event in agent.stream_async(prompt):
if "data" in event:
yield event["data"]

See Async Iterators for more information.

Implement robust error handling in production:

try:
result = agent("Execute this task")
except Exception as e:
# Log the error
logger.error(f"Agent error: {str(e)}")
# Implement appropriate fallback
handle_agent_error(e)

Strands agents can be deployed using various options from serverless to dedicated server machines.

Built-in guides are available for several AWS services:

  • Bedrock AgentCore - A secure, serverless runtime purpose-built for deploying and scaling dynamic AI agents and tools. Learn more

  • AWS Lambda - Serverless option for short-lived agent interactions and batch processing with minimal infrastructure management. Learn more

  • AWS Fargate - Containerized deployment with streaming support, ideal for interactive applications requiring real-time responses or high concurrency. Learn more

  • AWS App Runner - Containerized deployment with streaming support, automated deployment, scaling, and load balancing, ideal for interactive applications requiring real-time responses or high concurrency. Learn more

  • Amazon EKS - Containerized deployment with streaming support, ideal for interactive applications requiring real-time responses or high concurrency. Learn more

  • Amazon EC2 - Maximum control and flexibility for high-volume applications or specialized infrastructure requirements. Learn more

For production deployments, implement comprehensive monitoring:

  1. Tool Execution Metrics: Monitor execution time and error rates for each tool.
  2. Token Usage: Track token consumption for cost optimization.
  3. Response Times: Monitor end-to-end response times.
  4. Error Rates: Track and alert on agent errors.

Consider integrating with AWS CloudWatch for metrics collection and alerting.

See Observability for more information.

Operating Strands agents in production requires careful consideration of configuration, security, and performance optimization. By following the best practices outlined in this guide you can ensure your agents operate reliably and efficiently at scale. Choose the deployment pattern that best suits your application requirements, and implement appropriate error handling and observability measures to maintain operational excellence in your production environment.