Implement on-behalf-of token exchange for multi-tenant agents with Amazon Bedrock AgentCore Gateway
Amazon Bedrock now supports on-behalf-of token exchange for multi-tenant agents via AgentCore Gateway, enabling fine-grained access control with Okta integration.
- Amazon Bedrock now supports OBO token exchange for multi-tenant agents via AgentCore Gateway.
- The system integrates with Okta for identity management and applies JWT claim transformations for access control.
- Audience binding in the token exchange process enhances security through layered defense mechanisms.
- The implementation scales across tenants while maintaining fine-grained access control.
Amazon Web Services has introduced a new capability in Amazon Bedrock that allows developers to implement secure on-behalf-of (OBO) token exchange for multi-tenant agents. The feature is delivered through the AgentCore Gateway, which provides interceptors for fine-grained access control. The implementation guide demonstrates how to configure this system with Okta, showing the step-by-step process for setting up JSON Web Token (JWT) claim transformations across each hop in the authentication flow. This approach ensures defense in depth by binding audience claims, which scales effectively across multiple tenants without compromising security or performance.
Provides a secure, scalable way to build multi-tenant agents with fine-grained access control.
Enables secure agent deployments across multiple customers or departments with centralized identity management.
Advances secure multi-tenant AI agent architectures.
- OBO token exchange
- A mechanism where one service acts on behalf of another to obtain access tokens, enabling delegation without exposing credentials.
- JWT claim transformations
- Modifying or adding claims within a JSON Web Token to enforce specific access policies or permissions.
- AgentCore Gateway
- A component in Amazon Bedrock that facilitates secure token exchange and access control for multi-tenant agents.
AI ToolsWhen your brain works differently, AI isn’t a luxury—it’s accessibility
AI ToolsOpenAI's new prompting guide tells users to stop overthinking and start with the result
AI ToolsWindows questions? How Copilot can analyze your PC settings now
AI ToolsLaunching UI for generative AI inference recommendations in Amazon SageMaker AI
Artificial Intelligence Poised to Rewrite the Crop Protection Playbook - AgWeb
DOOMQL
<p><strong><a href="https://github.com/petergpt/doomql">DOOMQL</a></strong></p> Peter Gostev built this using GPT-5.6 Sol. This is a <em>lot</em> of fun: </p> <blockquote> <p>DOOMQL started with a deliberately unreasonable question: what if SQLite were the game engine, not merely the place where a game stores data?</p> <p>The result is a small, original Doom-like game in which SQL owns movement, collision, enemies, combat, progression and every RGB pixel on screen.</p> </blockquote> <p>It's implemented as a Python terminal script - I tried it out like this:</p> <pre><code>cd /tmp git clo
Protesters March on OpenAI, Anthropic, and Google DeepMind Demanding AI Development Pause - Yahoo
Protesters March on OpenAI, Anthropic, and Google DeepMind Demanding AI Development Pause Yahoo
09 Radiologists’ and Ultrasound Artificial Intelligence Decision-Support Assessment of Benign and Malignant Cystic Breast Lesions - CancerNetwork
A new study finds that AI decision-support tools enhance radiologists' ability to distinguish between benign and malignant cystic breast lesions.
XAI’s Grok Build CLI caught uploading private code and secrets to Google Cloud bucket - Crypto Briefing
XAI’s Grok Build CLI caught uploading private code and secrets to Google Cloud bucket Crypto Briefing
Siri AI Is Becoming Apple’s Everything Tool
Apple’s revamped Siri is more than a voice assistant; it’s now the backbone of the iPhone user experience. You can try it now through the iOS 27 public beta.
Google Gemini AI Predicts Shocking Bitcoin Price by End of 2026 - Cryptonews
Google Gemini AI Predicts Shocking Bitcoin Price by End of 2026 Cryptonews