# Gateways
<a name="Gateways"></a>

Monitor how your agents discover and interact with external tools and services through AgentCore Gateway. For more information on Amazon Bedrock AgentCore Gateway, see [Amazon Bedrock AgentCore Gateway](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway.html). Gateway observability includes comprehensive monitoring across multiple areas:
+ Track API transformation success rates and response times for external service calls
+ Monitor tool discovery patterns and usage frequency across different agents
+ Analyze authentication and authorization flows for third-party service access
+ Observe data transformation accuracy when converting between different API formats
+ Track error rates and retry patterns for external service integrations

![\[Gateways view\]](http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/images/Gateways.png)


Expand the **View details** section to view the gateway metrics in graphs.

![\[Gateways metrics view\]](http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/images/Gateway_metrics.png)


Under **Gateways**, choose a gateway **Name** to view the dashboard. You can also sort the list of gateways by click the column headers in the table.

![\[Gateways details view\]](http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/images/Gateways_tile.png)


# Gateway details - Overview
<a name="gateways-overview"></a>

The **Overview** tab provides insights derived from sampled spans after transaction search is enabled.

The **Gateway metrics** section lists all of the agents associated with the selected gateway, and it provides information about the number of sessions, traces and errors for each associated agent.

![\[Gateway metrics\]](http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/images/overview_metrics.png)


Additionally, the **Overview** tab includes the following interactive charts.

------
#### [ Invocations ]

The **Invocations** chart shows the total number of API requests made. Each API call counts as one invocation, regardless of the response status.

------
#### [ System and client errors ]

The **System and client errors** chart provides information about the number of API requests that failed with system erros (`5xx` error codes) and user errors (`4xx` status codes, excluding `429`), and the overall error rate as a percentage.

------
#### [ Throttles ]

The **Throttles** chart provides information about the number API requests that were throttled (`429` status code) by the service, and the overall throttle rate as a percentage.

------
#### [ Invocation latency ]

The **Invocation and latency** chart provides information about the average latency for list and call tools. It also provides information about average latency between when the service received the request and when it begins sending the first response token.

------
#### [ Policy decisions over time ]

The **Policy decisions over time** chart provides information about the number of decisions that resulted in `allow` and `deny` authorization actions. To view decisions for a specific policy, select the policy in the drop-down.

![\[Policy decisions over time chart\]](http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/images/05_policydecisions.png)


------
#### [ Policy decisions: Per policy distribution ]

The **Policy decisions: Per policy distribution** chart lists all of the policy engines associated with the selected gateway, and shows the policy, number of allows and denies, and enforcement mode for each policy engine. You can choose a policy engine or policy in the list to view more details about it in the Amazon Bedrock AgentCore console.

![\[Policy decisions: Per policy distribution\]](http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/images/06_policydistribution.png)


------

# Gateway details - Traces
<a name="gateways-traces"></a>

The **Traces** tab displays all of the sampled traces for the selected gateway. In the **Traces** section, choose a **Trace ID** to view to view metrics for the trace and all of the spans within it.

![\[Gateways traces view\]](http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/images/gateway_traces.png)