Amazon Bedrock AgentCore Identity expanded its credential provider capabilities by allowing reference to customer-managed secrets stored in AWS Secrets Manager, replacing prior service-managed secrets. This empowers customers to enforce tagging, CMK encryption, rotation, and resource policies according to internal governance.
Customers maintain full ownership over secret lifecycle and classification, improving compliance posture without altering runtime usage by AgentCore Identity. This feature is generally available across 14 AWS regions, enhancing security controls for organizations using Bedrock's identity management.
Source & further reading
Amazon Bedrock AgentCore Identity now allows you to bring your own secrets with AWS Secrets Manager ↗Source published 2026-06-01. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.