保障人工智能代理安全：SailPoint 与 Amazon Bedrock AgentCore 的合作历程.pdf

1、 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.I S V 3 1 1Securing AI Agents:SailPoints Journey with Amazon Bedrock AgentCoreAlvaro Sanchez MartinFei YuanSenior Solutions Architect,AWSPrincipal Engineer,Bedrock A

2、gentCore Identity,AWS 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.AgendaAI Agent adoption momentum and challengesAmazon Bedrock AgentCore IdentityCustomer success story:SailPointOpen discussion and Q&A 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Ama

3、zon Web Services,Inc.or its affiliates.All rights reserved.AI Agent adoption momentum and challenges 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Amazon Bedrock AgentCore Identity 2025,Amazon Web Services,Inc.or

4、 its affiliates.All rights reserved.AgentCore RuntimeAmazon Bedrock AgentCore components ModelsAgentCore ObservabilityAgentCore MemoryAgentCore GatewayAgentCore BrowserAgentCore Code InterpreterAgentCore IdentityMCPClientAgent instructionAgent local toolsAgent contextFramework 2025,Amazon Web Servic

5、es,Inc.or its affiliates.All rights reserved.Agents present identity challengesInbound AuthOutbound AuthTools,resources,tool gatewaysIs this User allowedto call this Agent?Is this Agent allowedto access this Resourceon behalf of User?Who is this User?Authentication(AuthN)Authorization(AuthZ)Is this

6、Agent whoit claims to be?AgentUserAppWho is this Agent?Your users need to access the agent through an applicationThe agent needs toaccess resourcesBedrock AgentCore Identity can help you with both 2025,Amazon Web Services,Inc.or its affiliates.All rights reserved.Agent Identity DirectoryAgentCore Ru