# AWS shows how to govern many AI agents with Okta and AgentCore Gateway

> Original title: Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 2

- Source: AWS Machine Learning Blog
- Published: 2026-11-06T17:09:23.000Z
- Bad Influence: https://badinfluence.news/items/rcphdjcak9japet4c195dapk5
- Original: https://aws.amazon.com/blogs/machine-learning/govern-ai-agent-access-with-okta-cross-app-access-and-amazon-bedrock-agentcore-part-2/

## Summary

AWS explains how to scale AI agent access governance using Okta Cross App Access and Amazon Bedrock AgentCore Gateway, with Cedar policies evaluated at a single front door. The post adds a second agent on Amazon EKS and uses AgentCore Observability with CloudWatch to trace each allow and deny decision back to the control that made it. AWS notes the code is sample code for non-production use.

## Why it matters

The post shows how a single Gateway, Cedar policies, and Okta's System Log together let teams trace each agent's allow and deny decision as the agent fleet grows.