{"type":"post","id":"govern-ai-agent-access-with-okta-cross-app-d2ba0c","slug":"govern-ai-agent-access-with-okta-cross-app-d2ba0c","title":"Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore","description":"AWS describes a reference implementation for governing agents that act on a user’s behalf across applications, combining Okta Cross App Access with Amazon Bedrock AgentCore Identity and runtime.","retrieval_nugget":"AWS describes a reference implementation for governing agents that act on a user’s behalf across applications, combining Okta Cross App Access with Amazon Bedrock AgentCore Identity and runtime. The pattern separates authorization decisions from credential handling and reports that revocation blocked new requests in about one second in AWS’s tests.","published_at":"2026-11-07","updated_at":"2026-11-07","record_date":"2026-11-07","date_kind":"published_at","topics":["agent-identity","agent-security","governance"],"entities":["Amazon Bedrock AgentCore","Okta Cross App Access","Okta","Amazon Web Services","Model Context Protocol"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"The story adds an Okta Cross App Access governance pattern for controlling AI agent access with Amazon Bedrock AgentCore.","prior_refs":["https://newruntime.com/posts/build-a-semantic-layer-for-agentic-ai-on-ec1cc0/","https://newruntime.com/posts/getting-started-with-web-answer-on-amazon-bedrock-7b64a7/"],"source_url":"https://aws.amazon.com/blogs/machine-learning/govern-ai-agent-access-with-okta-cross-app-access-and-amazon-bedrock-agentcore-part-1","source_urls":["https://aws.amazon.com/blogs/machine-learning/govern-ai-agent-access-with-okta-cross-app-access-and-amazon-bedrock-agentcore-part-1"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:govern-ai-agent-access-with-okta-cross-app-d2ba0c","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/govern-ai-agent-access-with-okta-cross-app-d2ba0c/","markdown":"https://newruntime.com/posts/govern-ai-agent-access-with-okta-cross-app-d2ba0c.md","json":"https://newruntime.com/posts/govern-ai-agent-access-with-okta-cross-app-d2ba0c.json"},"markdown_url":"https://newruntime.com/posts/govern-ai-agent-access-with-okta-cross-app-d2ba0c.md","next_reads":[{"type":"topic","path":"/topics/agent-identity/","url":"https://newruntime.com/topics/agent-identity/","title":"Agent Identity","reason":"Explore the agent-identity topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agent-identity.md","json_url":"https://newruntime.com/topics/agent-identity.json"},{"type":"topic","path":"/topics/agent-security/","url":"https://newruntime.com/topics/agent-security/","title":"Agent Security","reason":"Explore the agent-security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agent-security.md","json_url":"https://newruntime.com/topics/agent-security.json"},{"type":"topic","path":"/topics/governance/","url":"https://newruntime.com/topics/governance/","title":"Governance","reason":"Explore the governance topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/governance.md","json_url":"https://newruntime.com/topics/governance.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}