AWS ships a managed OAuth consent portal for Bedrock AgentCore, removing self-hosted session binding

AWS Machine Learning Blog·medium signalXBlueskyLinkedInCopy link

Bedrock AgentCore Identity added a Consent portal and a session binding endpoint for AgentCore Gateway on 14 September, so teams building three-legged OAuth flows no longer host their own session binding infrastructure. Users authenticate once against a corporate IdP, then grant per-service consent to providers such as GitHub and Slack without returning to the IDE; any OAuth 2.0 provider configured as a gateway target works. End-user delegated consent has been one of the messier parts of shipping agents against third-party APIs, and this is a managed answer to it.