AWS Securing Agent Identities Demonstrated is a hands-on exam lab that validates your AWS skills in the security domain, focusing on identity and access hardening for agentic AI workloads. In this timed assessment, you work in a live, AWS-provisioned environment to remediate critical identity gaps across a fleet of Amazon Bedrock AgentCore agents. You provision workload identities, enforce tag-based access control, gate inbound access with scoped JWT authorization, and establish audit trails for token operations.
This exam lab runs in a live, AWS-provisioned environment. After you begin, you have 135 minutes to complete all challenges. This exam lab provides procedural guidance but no hints. To pass, you must demonstrate proficiency in the Securing Agent Identities domain.
Important: Each exam lab is continuously tested for reliability. If something appears broken during your attempt, revisit the challenge guidance carefully; most issues stem from a missed configuration step rather than a technical fault.
Tip: Participants who carefully read all provided guidance before acting are significantly more likely to pass. Take time to understand each challenge fully, even under time pressure.
Before you begin:
Challenges are randomized and might not reflect the sequence of real-life scenarios.
This exam lab cannot be paused or restarted. If you exit, you will need to start again from the beginning.
If you fail the exam lab, you will need to wait 25 days before attempting it again.
To prepare for this assessment, we recommend the following training:
- AWS Cloud Quest: Security
- AWS Cloud Quest: Generative AI Architect
- AWS SimuLearn: Getting Started with AgentCore Runtime
- AWS SimuLearn: Identity and Access Management
- Building Production-Ready AI Agents with Amazon Bedrock AgentCore
