Jeff Lombardo

AI agents act on behalf of users and systems, and delegating the right access without over-permissioning is hard. In this chalk talk, we use code examples to work through authorization delegation with Amazon Bedrock AgentCore Identity.

This hands-on workshop addresses the critical challenge of managing identities and permissions for generative AI agents. Learn to implement user and machine authentication, along with fine-grained authorization mechanisms, tailored for AI agents, tools, and LLMs.

Get hands-on implementing secure authentication and access management for AI agents using Amazon Bedrock AgentCore Identity. In this builder's session, you'll practice configuring agent identities, implementing OAuth-based tool access, and setting up secure agent access.

Cedar is a powerful open source solution for creating large-scale policy-based authorization systems. As policy systems expand, opportunities arise to enhance traditional testing approaches, addressing nuanced scenarios like Shadowed Permits, Impossible Conditions, Forbid Overrides, and Complete Denials.

This year, AWS announced updates to the AWS Well-Architected Framework across all six pillars. The security pillar added a new best practice area, application security (AppSec).