AWS shows Okta Cross App Access governing agents that act for a user across apps. Access design now has to separate what an agent may do as itself from what it does on someone's behalf.
From the Field Notes:
- Claimable sandboxes: Frictionless Stripe accounts for agents (2026-11-06)
- Canva service accounts, bring Canva APIs into your product (2026-11-06)
- Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore (2026-11-07)
- Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 2 (2026-11-07)