AWS Releases Tutorial Series on Okta XAA and Bedrock AgentCore for Governing Agent Access
Understand the story
On November 7, 2026, the AWS Machine Learning Blog published the first part of a tutorial series introducing a combination of Okta Cross App Access (XAA) and Amazon Bedrock AgentCore for governing AI agents' access permissions. In this solution, Okta serves as the governance plane, deciding which application an agent can access on behalf of which user; AgentCore runtime and AgentCore Identity handle verification on the AWS side and redeem short-lived access tokens. The same day, the blog published Part 2 of the series, building on the Part 1 solution by introducing AgentCore Gateway as a unified entry point, which redeems Okta's ID-JAG authorization and uses Cedar policies to enforce centralized default-deny authorization before tool calls. There are no reports yet of subsequent parts in the series.
AI overview of reporting · Updated 1 h前
Developments
2 developments
- 11/7 01:09 · 1 reportsAWS Blog Explains Governing Agent Access with Okta XAA and AgentCore GatewayAWS Machine Learning Blog：Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 2
- 11/7 01:09 · 1 reportsAWS Blog Tutorial: Governing Agent Access with Okta XAA and Bedrock AgentCoreAWS Machine Learning Blog：Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 1
Reporting timeline
Explore different aspects of the story through its reporting.
- AWS Machine Learning BlogGovern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 2
Part 2 of a series, this article builds on the Part 1 Okta Cross App Access (XAA) + Amazon Bedrock AgentCore solution by introducing AgentCore Gateway as a unified entry point, which redeems Okta's ID-JAG authorizations and applies Cedar policies for centralized, default-deny authorization before tool calls.
- AWS Machine Learning BlogGovern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 1
In a combined setup using Okta Cross App Access (XAA) and Amazon Bedrock AgentCore, Okta serves as the governance plane deciding which application an agent may access on behalf of which user, while AgentCore runtime and AgentCore Identity enforce validation on the AWS side and redeem short-lived access tokens.
Story heat trend
Not enough continuous observations to show a trend yet.