This course was developed by members of AWS Technical Field Communities (TFC), an AWS community of technical experts. The content is intended to complement our standard training curriculum and augment your AWS learning journey. We are aware some courses have accessibility limitations and are working to address. If you require accommodation, please contact AWS Training and Certification Customer Support.
Learners will gain an understanding of how Amazon Bedrock AgentCore secures agentic workflows through identity propagation. The course covers workload identity provisioning, the token vault, and the distinction between inbound and outbound authentication methods -- including IAM SigV4, JWT Bearer via OIDC, and OAuth 2.0 flows for machine-to-machine and user-delegated scenarios. Participants will learn how to pass user identity downstream using token exchange flows and the X-Amzn-Bedrock-AgentCore-Runtime-User-Id header, enabling agents to act securely on behalf of specific users when accessing external resources.
