Manage end-user OAuth consent for AI agents with Amazon Bedrock AgentCore

Sep 2026·
Swara Gandhi
Swara Gandhi
· 0 min read
Abstract
AI agents often need to access services such as GitHub and Slack on a user’s behalf, which requires the user to authenticate and explicitly approve the requested access, then securely bind that OAuth grant to the user who authorized it. AgentCore Identity, a capability of Amazon Bedrock AgentCore, now offers a Consent portal, a managed web experience and session binding endpoint for AgentCore Gateway. You create a portal for a gateway and share its URL with your users, who authenticate with your identity provider, review the services available to the agent, and grant consent to individual providers. The portal handles browser redirects and session binding while AgentCore Identity stores the resulting tokens in its token vault. This post walks through the administrator and end-user experiences on the AWS Management Console and browser, and shows how to review the resulting activity in AWS CloudTrail.
Type
publications
Amazon Bedrock AgentCore Identity OAuth 2.0 Consent Security AI Agents
Swara Gandhi
Authors
Swara Gandhi
Senior Solutions Architect at Amazon Web Services

Swara Gandhi is a Senior Solutions Architect in Identity Solutions at Amazon Web Services, based in New York. She is a 15x speaker at flagship AWS events - re:Invent, re:Inforce, and AWS Summits - and a speaker at RSA Conference 2026, IEEE Cloud Summit 2026, and FIDO Authenticate 2026 on trusted identity propagation for autonomous agents across cloud and SaaS.

Swara specializes in access controls, data perimeters, and policy-as-code, delivering large-scale identity features and reference architectures adopted by Fortune 100 financial institutions. She is a core contributor to Amazon Bedrock AgentCore Identity, building OAuth flows, identity propagation patterns, and zero-trust primitives for the agentic AI era.

Swara is a contributor to the Internet Engineering Task Force (IETF) and FIDO Alliance, and serves on the IDPro Body of Knowledge Committee. She co-hosts industry webinars on bridging identity gaps across teams and systems, and is the author of widely-adopted AWS best practices, case studies, and open-source tooling for enterprise identity governance.

In 2025, Swara was recognized by the Influential Women platform for leadership and innovation in the identity space.