AWS has introduced fine-grained access control for Amazon Bedrock AgentCore Memory, helping developers secure agent memory at the user and tenant level without building custom authorization logic.
Organizations can place Memory resources behind AgentCore Gateway, authenticate callers through OAuth and JWT tokens, and use Cedar policies to determine which memory data and operations each caller can access. Policies can restrict users to their own actor data, control namespaces using token claims, and allow or deny specific Memory operations.
The AgentCore Memory connector exposes 12 Memory operations as Cedar actions, moving authorization from application code into the infrastructure layer for stronger agent security.
