Amazon Bedrock AgentCore Memory now supports fine-grained access control

Amazon Bedrock AgentCore Memory now includes fine-grained access control (FGAC), allowing you to enforce per-user and per-tenant memory isolation through an AgentCore Gateway with OAuth (JWT) authentication and Cedar policies. This restricts access based on the authenticated user's identity, ensuring each user accesses only their own data, limiting records to namespaces from user token claims, and allowing or denying specific operations. It moves access control from application code to infrastructure using cryptographic identity proof.

Why it matters

This update benefits developers and enterprises needing enhanced security for shared memory data across multiple users or tenants