AWS Bedrock AgentCore Introduces Private Key JWT Authentication

AWS ML Blog · rss · 2026-07-30

Amazon AWS announced that Bedrock AgentCore Identity now supports Private Key JWT client authentication for AI agents.

This feature allows agents to authenticate to downstream identity providers using a signed JWT client assertion via AWS KMS, replacing traditional shared OAuth 2.0 client secrets. This ensures the private key never leaves KMS, significantly enhancing security when agents access internal APIs. AWS also detailed three supported grant flows: Machine-to-Machine (M2M), On-Behalf-Of (OBO), and User-delegated access.

Original post →

More from coding & agent

coding & agent channel →