# bedrockagentcore-runtime-private-network-required
<a name="bedrockagentcore-runtime-private-network-required"></a>

Checks if an Amazon Bedrock AgentCore runtime is configured with public network access. The rule is NON\_COMPLIANT if the runtime has NetworkMode set to PUBLIC. 



**Identifier:** BEDROCKAGENTCORE\_RUNTIME\_PRIVATE\_NETWORK\_REQUIRED

**Resource Types:** AWS::BedrockAgentCore::Runtime

**Trigger type:** Configuration changes

**AWS Region:** Only available in Europe (Stockholm), Asia Pacific (Mumbai), Europe (Paris), US East (Ohio), Europe (Ireland), Europe (Frankfurt), US East (N. Virginia), Asia Pacific (Seoul), Europe (London), Asia Pacific (Tokyo), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Sydney), Canada (Central) Region

**Parameters:**

None  

## AWS CloudFormation template
<a name="w2aac20c16c17b7d279c19"></a>

To create AWS Config managed rules with AWS CloudFormation templates, see [Creating AWS Config Managed Rules With AWS CloudFormation Templates](aws-config-managed-rules-cloudformation-templates.md).