Amazon launches IAM service for AI agent security and access control

Amazon has launched Bedrock AgentCore Identity, a new identity and access management (IAM) service designed specifically for AI agents. The service aims to streamline the management of agent identities, secure credentials, and enable seamless integration with both AWS and third-party services.

Key Features of AgentCore Identity

• Centralized Identity Management: Provides a unified directory for creating and managing agent and workload identities.
• Dual Authentication Model:
  • Inbound: Controls who can access the agent.
  • Outbound: Manages what resources the agent can access.
• Resource Credential Provider: Stores configurations for agents needing credentials to access downstream services like Google or GitHub.
• Resource Token Vault: Securely stores user OAuth tokens for agent actions on behalf of users.

Benefits and Claims

Amazon asserts that the service eliminates months of custom development by offering enterprise-grade security. It enables AI systems to "safely operate across organizational boundaries" while accessing diverse resources. The service is particularly relevant for integrations with platforms like Salesforce, Slack, and other third-party tools.

Availability

Detailed documentation is available on the AWS Bedrock AgentCore page. The launch reflects Amazon's continued investment in agentic AI infrastructure and security solutions.