AGENTSUS03-BP04 Decommission unused agents and prevent agent sprawl
Every agent that stays deployed past its usefulness consumes infrastructure, expands the attack surface, and adds operational overhead that never shows up as an explicit line item. Active portfolio management helps prevent the silent accumulation of cost and complexity that comes with scaled adoption.
Desired outcome:
-
Every deployed agent has a documented owner, a clear business purpose, and measurable usage.
-
Agents that no longer deliver value move through a structured decommissioning lifecycle and are retired.
-
Teams search the agent registry for existing capabilities before initiating new agent development.
-
Portfolio health, total agent count, percentage with active usage, percentage with current documentation, is visible at the organizational level.
Common anti-patterns:
-
Deploying agents without ownership assignment or usage tracking, so no one can tell which agents still deliver value.
-
Allowing abandoned agents to persist indefinitely because no decommissioning process exists, accumulating infrastructure cost and expanding the attack surface.
-
Building new agents for capabilities that already exist in deployed agents elsewhere in the organization, creating redundant implementations.
-
Relying on informal knowledge of which agents are still useful instead of automated usage tracking, so the decommissioning decision depends on whoever happens to remember which agents are deployed.
Benefits of establishing this best practice:
-
Portfolio-level decisions about resource consumption are tied to actual business value delivered, rather than historical deployment patterns.
-
Decommissioning reclaims infrastructure resources and reduces the operational surface area.
-
Discoverability of existing capabilities reduces redundant implementations and reinforces reusable architecture patterns.
Level of risk exposed if this best practice is not established: Medium
Implementation guidance
Amazon Bedrock AgentCore Registry provides the authoritative catalog of deployed agents, with each entry capturing business purpose, designated owner, deployment date, dependencies, and usage metrics. Semantic capability search lets teams discover existing agents before building new ones, which is the preventive side of avoiding agent sprawl. Pair the registry with Amazon CloudWatch metrics tracking invocation frequency and last-invocation timestamp for each agent. Inactive agents then surface automatically for owner review instead of being discovered during audits.
Decommissioning becomes routine when it has a defined lifecycle. Active, under review, deprecated, and decommissioned stages give owners clear transitions and give the organization consistent visibility into which agents are on the path to retirement. When an agent is flagged for low usage, the owner's first question is whether it serves a seasonal or infrequent-but-critical purpose. Tax-season agents, quarterly reporting agents, and disaster-recovery agents appear idle most of the time but are essential when they are invoked. A structured review makes that distinction before deprecation happens.
During quarterly portfolio rationalization, teams evaluate the full agent inventory against current business priorities, identify overlapping capabilities, and merge redundant implementations into shared patterns (following AGENTSUS01-BP02 Implement reusable workflow patterns). They retire agents whose business context has changed. Portfolio health metrics tracked through Amazon Bedrock AgentCore Observability, total agent count, percentage with active usage, and percentage with current documentation, make sustainability outcomes visible at the organizational level.
Implementation steps
-
Register every deployed agent with ownership metadata: Record each agent in Amazon Bedrock AgentCore Registry with the following:
-
Business purpose
-
Designated owner
-
Deployment date
-
Dependencies
-
-
Track invocation metrics and flag inactive agents: Instrument agents with Amazon CloudWatch metrics capturing invocation frequency and last-invocation timestamp, and flag agents that cross a defined inactivity threshold for owner review.
-
Define a decommissioning lifecycle: Establish the following stages with transition criteria and owner responsibilities at each:
-
Active
-
Under review
-
Deprecated
-
Decommissioned
-
-
Require registry search before new agent development: Add a pre-development check to the intake process so teams discover and evaluate existing capabilities before initiating new work.
-
Run quarterly portfolio reviews: Evaluate the full agent inventory against current business priorities, consolidate overlapping capabilities into shared patterns, and retire agents whose business context has changed.
Resources
Related best practices:
Related documents:
Related videos:
Related services: