This course was developed by members of AWS Technical Field Communities (TFC), an AWS community of technical experts. The content is intended to complement our standard training curriculum and augment your AWS learning journey. We are aware some courses have accessibility limitations and are working to address. If you require accommodation, please contact AWS Training and Certification Customer Support.
Learners will gain practical knowledge of securing AI agents running on Amazon ECS using Amazon Bedrock AgentCore Identity. The course covers implementing Authorization Code Grant (3-legged OAuth) with secure session binding, scoped tokens, and separation of concerns between agent workloads and session binding services. Participants will learn how to prevent CSRF and browser-swapping attacks, manage workload access token lifecycles, and apply least-privilege principles by scoping auth tokens to individual user sessions -- maintaining an auditable chain from user authentication through to agent action.
