AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2025-10-01 · Documentation low

File: bedrock-agentcore/latest/devguide/identity-idp-github.md

Summary

Added GitHub OAuth2 application setup guide with client secret handling instructions

Security assessment

Documents secure OAuth2 implementation patterns but does not fix an existing vulnerability. Emphasizes secure secret management through warnings about secret visibility.

Diff

diff --git a/bedrock-agentcore/latest/devguide/identity-idp-github.md b/bedrock-agentcore/latest/devguide/identity-idp-github.md
index 72b08eb45..4ddd1a08b 100644
--- a//bedrock-agentcore/latest/devguide/identity-idp-github.md
+++ b//bedrock-agentcore/latest/devguide/identity-idp-github.md
@@ -5 +5 @@
-Outbound
+Configuring a OAuth2 application for GithubOutbound
@@ -10,0 +11,35 @@ Amazon Bedrock AgentCore is in preview release and is subject to change.
+You can set up GitHub as an outbound provider using GitHub OAuth 2.0.
+
+## Configuring a OAuth2 application for Github
+
+###### To configure a GitHub OAuth2 application
+
+  1. Choose the profile picture of your github account and choose **Settings**.
+
+  2. Choose **Developer settings**.
+
+  3. Choose **OAuth Apps**.
+
+  4. On the OAuth2 apps page choose **New OAuth App**.
+
+  5. Enter the necessary details specific to your application. For authorization callback URL provide the following:
+
+     * `https://bedrock-agentcore.{region}.amazonaws.com/identities/oauth2/callback`
+
+  6. Choose **Register application** to create your Github OAuth app.
+
+  7. On Github's OAuth Apps page, go to your newly created provider.
+
+  8. Under the client secrets section, choose **Generate a new client secret**.
+
+  9. Make a note of the newly created client secret. You'll need this to configure your Github application with AgentCore Identity.
+
+###### Note
+
+Github only returns the full secret when it is created. If you lose track of it you'll need to recreate the client secret to configure the provider in AgentCore Identity.
+
+
+
+
+For more details, refer to Github's documentation [Creating an OAuth app](https://docs.aws.amazon.com/https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/creating-an-oauth-app).
+