AgentCore Policy: Secure and Govern AI Agent Tool Access

Yazan Khalaf, Solutions Architect, AWS Israel ISV · Dan Cohen, Sr. Solutions Architect, AWS Israel ISV

AWS Summit Tel Aviv 2026 · AWS Demos · 26 min · 17 pages

This demo showcases Amazon Bedrock AgentCore's fine-grained access control capabilities, focusing primarily on the Policy engine with an overview of Gateway interceptors. AgentCore Policy uses the Cedar policy language to define and enforce authorization policies that govern agent tool access, intercepting all agent traffic through AgentCore Gateways and evaluating each request against defined policies before allowing tool execution. The demonstration will illustrate policy configuration, real-time enforcement of access controls, and how organizations can securely govern tool access across enterprise AI agent deployments at scale.

Generated automatically from the recording's transcript. It's meant to replace re-watching, not the recording itself — verify against the video at the timestamp before quoting formally. Slides belong to the speakers and organisers. Produced with recording-to-pdf.