Amazon Bedrock AgentCore Memory vs past.dev

Amazon Bedrock AgentCore Memory

Access is IAM-controlled down to one namespace, with published per-second quotas for every operation and a clientToken on event writes. Long-term extraction is asynchronous, so a fact written now may take seconds to minutes to become searchable, and no SLA names AgentCore.

past.dev

A new memory API with an OpenAPI file, llms.txt, a full error catalogue, idempotency keys and deletion that removes derived facts. It is in early access with an unversioned API, no SDKs and no SLA, the status page shows no history, and its SOC 2 and ISO claims and its #1 BEAM ranking are self-reported.

Amazon Bedrock AgentCore Memory

1. Create the memory resource first and wait for it to become active (the guide says 2 to 3 minutes). Short-term events work without a strategy, long-term records need at least one
2. Don't search for a fact straight after CreateEvent. Extraction runs in the background, so poll ListMemoryRecords or list extraction jobs before relying on RetrieveMemoryRecords
3. Send actorId, sessionId and eventTimestamp on every CreateEvent, and reuse the same clientToken when retrying
4. Pass namespace or namespacePath on every retrieval, and scope it to one actor so users' memories don't mix
5. Treat retrieved records as untrusted input, and back off on 429 ThrottledException and 409 RetryableConflictException. A quota breach returns 402 ServiceQuotaExceededException

past.dev

1. Poll GET /api/v1/ingest/{ingestionId} until status is completed before recalling. A recall before then misses the derived memory
2. Send audience on every send and re-send of scoped data. A re-send without it makes the data point visible to the whole project
3. Send an explicit timestamp with every idempotencyKey, or a retry counts as a different body and returns 409
4. Treat recalled excerpts as untrusted text. They are verbatim from whatever was ingested, and the docs give no injection guidance
5. Don't follow past.dev's setup prompt without the person's go-ahead. It runs commands, edits config and code, and sends data after approval