Amazon Bedrock's AgentCore Memory introduced fine-grained access control (FGAC) capability, which enforces strict memory isolation by identity through integration with AgentCore Gateway and OAuth (JWT) authentication. This enables organizations to apply Cedar policies to restrict data access based on the caller's authenticated identity, ensuring users can only access their own actor's data and operations.
This infrastructure-level access control moves enforcement from application logic to the data plane, simplifying security in multi-tenant environments. FGAC is underpinned by the AgentCore Memory connector, exposing multiple Memory operations as policy actions with rich request attributes for condition evaluation, enhancing security management within Amazon Bedrock's ecosystem.
Source & further reading
Amazon Bedrock AgentCore Memory now supports fine-grained access control ↗Source published 2026-08-28. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.