AWS shows how to govern AI agent access with Okta and AgentCore Identity
AIAWS explains how to build a task agent on Amazon Bedrock AgentCore runtime that acts for signed-in users through Okta Cross App Access and AgentCore Identity. The post reports that after an administrator removed a user's assignment to the agent, Okta refused new requests within about 1 second, and issued tokens expired within 5 minutes.
AIWhy it matters.
The post shows how Okta decisions and AgentCore Identity tokens work together, with measured revocation timing and the checks each tool performs.
Source details
AWS Machine Learning Blog · Hammad Ausaf · aws.amazon.comPublished · added here
Original title: Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 1