Audience
Developers and security teams building AI agents that need workload identities and secure access to AWS resources, APIs, and third-party services.
About Amazon Bedrock AgentCore Identity
Amazon Bedrock AgentCore Identity is a cloud identity and credential-management service for AI agents and automated workloads. Developers can create workload identities, configure OAuth 2.0 credential providers, and obtain tokens for user-delegated or machine-to-machine access to AWS resources and external services. The service stores and manages credentials, including OAuth tokens, and applies authorization controls so agents can access resources on behalf of users or under their own permissions. It includes inbound authentication options, credential vaulting, workload identity controls, and integration with Amazon Bedrock AgentCore Runtime and Gateway. AgentCore Identity is intended for developers and security teams building agents that need authenticated access to tools, APIs, and user-authorized data. It can be used with compatible OAuth providers and agent applications running on or outside AgentCore.
Other Popular Alternatives & Related Software
NewCore
NewCore is a next-generation identity provider for humans and AI agents, built around one converged identity core that keeps every human and agentic identity visible, secured, and governed from access to audit. It treats employees, contractors, partners, machines, on-behalf-of actions, delegated agents, and autonomous workloads as first-class identities under one architecture. Identity Security protects the trust behind access with SSO, passkeys, phishing-resistant MFA, secure token signing, authenticator strength scoring, and security-aware policies. Secure Split Key distributes signing authority between NewCore’s cloud and the customer environment so neither side can sign a valid token alone. Identity Discovery maps humans, agents, accounts, applications, authenticators, sessions, and access paths into one live graph, revealing shadow accounts, orphaned credentials, and unmanaged agents.
Learn more about NewCore
Amazon Bedrock AgentCore
Amazon Bedrock AgentCore enables you to deploy and operate highly capable AI agents securely at scale, offering infrastructure purpose‑built for dynamic agent workloads, powerful tools to enhance agents, and essential controls for real‑world deployment. It works with any framework and any foundation model in or outside of Amazon Bedrock, eliminating the undifferentiated heavy lifting of specialized infrastructure. AgentCore provides complete session isolation and industry‑leading support for long‑running workloads up to eight hours, with native integration to existing identity providers for seamless authentication and permission delegation. A gateway transforms APIs into agent‑ready tools with minimal code, and built‑in memory maintains context across interactions. Agents gain a secure browser runtime for complex web‑based workflows and a sandboxed code interpreter for tasks like generating visualizations.
Learn more about Amazon Bedrock AgentCore
Ping Identity
Ping Identity builds identity security for the global enterprise with an intelligent identity platform that offers comprehensive capabilities including single sign-on (SSO), multi-factor authentication (MFA), directory, and more. Ping helps enterprises balance security and user experience for workforce, customer, and partner identity types with a variety of cloud deployment options including identity-as-a-service (IDaaS), containerized software, and more. Ping has solutions for both IT and developer teams. Enable digital collaboration with simple integrations to these popular tools. Support your employees wherever they are with integrations to these popular tools. Deploy quickly with interoperability across the entire identity ecosystem. Whether you just want single sign-on (SSO) or a risk-based, adaptive authentication authority, starting off with a PingOne solution package lets you only pay for what you need, and gives you room to grow.
Learn more about Ping Identity
Google Cloud Agent Identity
Google Cloud Agent Identity gives each AI agent a distinct, cryptographically attested identity and managed X.509 credentials for authenticating to Google Cloud resources as itself. Its identity and credential management APIs support agent authentication, access to tools and services, and credential management for user-delegated OAuth flows. Administrators can apply IAM controls, including principal access boundaries and service perimeters, and review audit logs that distinguish agent actions from actions performed on a user's behalf. The service supports agent workloads running on Gemini Enterprise Agent Platform Runtime (Agent Runtime), Gemini Enterprise, Cloud Run, and Google Kubernetes Engine. Agents can use its credentials to access cloud resources, external APIs, and Model Context Protocol servers. Availability and supported authentication flows depend on the host service.
Learn more about Google Cloud Agent Identity
Pricing
Starting Price:
$0.01/1K requests
Pricing Details:
Standalone usage is $0.010 per successful OAuth token or API-key request for a non-AWS resource, billed per 1,000 requests. No minimum fees or upfront commitments. Identity incurs no additional charge when used through AgentCore Runtime or AgentCore Gateway.
Company Information
Amazon Web Services
Founded: 2006
United States
aws.amazon.com/bedrock/agentcore/
Videos and Screen Captures
Other Useful Business Software
Save Up to 91% on Cloud Compute With Spot VMs
Run batch jobs at 60-91% off with Spot VMs. Long-running workloads get automatic discounts with sustained use.
Product Details
Platforms Supported
Cloud
Training
Documentation
Support
Online
Amazon Bedrock AgentCore Identity Frequently Asked Questions
Q: What kinds of users and organization types does Amazon Bedrock AgentCore Identity work with?
Amazon Bedrock AgentCore Identity works with these users and organization types: Mid Size Business, Small Business, Enterprise, Freelance, Nonprofit, Government, and Startup.
Q: What languages does Amazon Bedrock AgentCore Identity support in their product?
Amazon Bedrock AgentCore Identity supports these languages: English.
Q: What kind of support options does Amazon Bedrock AgentCore Identity offer?
Amazon Bedrock AgentCore Identity offers support via online.
Q: What other applications or services does Amazon Bedrock AgentCore Identity integrate with?
Amazon Bedrock AgentCore Identity integrates with: Amazon Bedrock AgentCore, Amazon Cognito, Amazon Web Services (AWS), Microsoft Entra ID, Google Drive, GitHub, Okta, Salesforce, and Slack.
Q: Does Amazon Bedrock AgentCore Identity have an API?
Yes, Amazon Bedrock AgentCore Identity has an API.
Q: What type of training does Amazon Bedrock AgentCore Identity provide?
Amazon Bedrock AgentCore Identity provides training in the form of documentation.
Q: How much does Amazon Bedrock AgentCore Identity cost?
Pricing for Amazon Bedrock AgentCore Identity starts at $0.01/1K requests.
