AI Reports · Amazon · 2026-11-06 · Blog / commentary
Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 1
AI agents that act for users raise the question of which agent may act for which user in which application, and per-app OAuth and shared service accounts leave this unanswered. In part one of two, the authors build a task agent on Amazon Bedrock AgentCore that uses Okta Cross App Access and AgentCore Identity to govern access and enforce each user's authority. In their tests, Okta refused new requests within about 1 second after an assignment was removed, and issued tokens expired within 5 minutes.