Audience
Developers and security teams building AI agents that need workload identities and secure access to AWS resources, APIs, and third-party services.
About Amazon Bedrock AgentCore Identity
Amazon Bedrock AgentCore Identity is a cloud identity and credential-management service for AI agents and automated workloads. Developers can create workload identities, configure OAuth 2.0 credential providers, and obtain tokens for user-delegated or machine-to-machine access to AWS resources and external services. The service stores and manages credentials, including OAuth tokens, and applies authorization controls so agents can access resources on behalf of users or under their own permissions. It includes inbound authentication options, credential vaulting, workload identity controls, and integration with Amazon Bedrock AgentCore Runtime and Gateway. AgentCore Identity is intended for developers and security teams building agents that need authenticated access to tools, APIs, and user-authorized data. It can be used with compatible OAuth providers and agent applications running on or outside AgentCore.