Authenticate with Private Key JWT using Amazon Bedrock AgentCore Identity
Amazon Bedrock AgentCore Identity adds Private Key JWT authentication via AWS KMS for AI agents.
Amazon Bedrock AgentCore Identity now supports Private Key JWT client authentication, enabling AI agents to authenticate to downstream identity providers using KMS-signed JWT assertions instead of shared OAuth secrets. Private keys never leave AWS KMS, and all agent access is logged via CloudTrail, supporting machine-to-machine and delegated grant flows. This is a meaningful security hardening for enterprise teams building agentic workloads on AWS that need auditable, credential-safe API access.