Amazon announced a new Consent portal for AI agents as part of its Amazon Bedrock AgentCore service, designed to streamline the OAuth consent process for end users. This update is the first major enhancement to the AgentCore Identity feature since its initial release in 2023.
The new portal allows users to authenticate with their organization’s identity provider, review the services an AI agent can access, and grant consent to specific providers like GitHub and Slack. This capability eliminates the need for developers to build and host their own session binding infrastructure, which previously required managing browser sessions, handling redirects, and securely storing tokens.
"The portal handles the browser redirects and session binding, while AgentCore Identity stores the resulting tokens in its token vault," said a representative from Amazon.
This managed experience is particularly useful for developers using IDEs and Model Context Protocol clients such as Kiro, Cursor, and Visual Studio Code, enabling them to grant consent before invoking tools and reuse stored tokens for subsequent calls.
The announcement follows Amazon’s recent focus on improving the security and usability of AI agent interactions, emphasizing the need for transparent and user-controlled access to external services.
Amazon did not specify the exact number of organizations already using the feature, and the company noted that the portal is intended for use cases where user consent is required for third-party service access.
Source: awsml
