AWS Security Blog
Author: Abrom Douglas
Securing AI agents with Amazon Bedrock AgentCore Identity
By using Amazon Bedrock AgentCore, developers can build agentic workloads using a comprehensive set of enterprise-grade services that help quickly and securely deploy and operate AI agents at scale using any framework and model, hosted on Amazon Bedrock or elsewhere. AgentCore services are modular and composable, allowing them to be used together or independently. To […]
Empower AI agents with user context using Amazon Cognito
Amazon Cognito is a managed customer identity and access management (CIAM) service that enables seamless user sign-up and sign-in for web and mobile applications. Through user pools, Amazon Cognito provides a user directory with strong authentication features, including passkeys, federation to external identity providers (IdPs), and OAuth 2.0 flows for secure machine-to-machine (M2M) authorization. Amazon […]
How to monitor, optimize, and secure Amazon Cognito machine-to-machine authorization
September 4, 2025:The Amazon CloudWatch Logs Insights query in this blog has been updated to reflect the current AWS CloudTrail log for an Amazon Cognito M2M token issue event. This CloudTrail event now includes the client ID for all M2M token requests by default. Amazon Cognito is a developer-centric and security-focused customer identity and access […]