AWS bedrock-agentcore documentation change
Summary
Restructured getting started guide with new tutorials for authenticated agents and OAuth2 integration, added security-focused prerequisites
Security assessment
Added documentation for implementing authentication flows (OAuth2/Cognito) and securing agent access to external services. While this enhances security documentation, there's no evidence of addressing a specific vulnerability. The changes focus on teaching secure implementation patterns rather than fixing existing issues.
Diff
diff --git a/bedrock-agentcore/latest/devguide/identity-getting-started.md b/bedrock-agentcore/latest/devguide/identity-getting-started.md index 45e2b2620..8f8f5d4eb 100644 --- a//bedrock-agentcore/latest/devguide/identity-getting-started.md +++ b//bedrock-agentcore/latest/devguide/identity-getting-started.md @@ -5 +5 @@ -Amazon Bedrock AgentCore is in preview release and is subject to change. +Primary getting started tutorialOAuth2 integration getting started tutorialCommon prerequisites @@ -7 +7 @@ Amazon Bedrock AgentCore is in preview release and is subject to change. -# Getting started with Amazon Bedrock AgentCore Identity +# Get started with AgentCore Identity @@ -9 +9 @@ Amazon Bedrock AgentCore is in preview release and is subject to change. -This guide walks you through the essential steps to start using Amazon Bedrock AgentCore Identity for your AI agents. You'll learn how to set up your development environment, install the necessary SDKs, create your first agent identity, and allow your agent to access external resources securely. +If you're building AI agents that need to access external services like Google Drive, Slack, or GitHub, Amazon Bedrock AgentCore Identity provides the secure authentication infrastructure you need. This section offers two practical getting started tutorials that demonstrate how to implement identity features in your agents. Depending on your specific business needs, you can start with a complete end-to-end agent deployment, or focus on OAuth2 integration patterns with Google Drive to understand the core authentication flows. @@ -11 +11,20 @@ This guide walks you through the essential steps to start using Amazon Bedrock A -By the end of this section, you'll have a working agent that can retrieve access tokens from Google with AgentCore Identity OAuth2 Credential Provider, and read files from Google Drive using access tokens. For detailed information about OAuth2 flows, see [Manage credential providers with AgentCore Identity](./identity-outbound-credential-provider.html). +## Primary getting started tutorial + +Start here for a complete end-to-end walkthrough of AgentCore Identity features: + +[Build your first authenticated agent](./identity-getting-started-cognito.html) + + +**Recommended starting point** for new users + +**What you'll build:** A complete working agent with authentication, deployed to AgentCore Runtime + +**What you'll learn:** Create Cognito user pools, configure credential providers, deploy agents, set up IAM policies, and test authentication flows + +**Outcome:** Fully deployed agent that can authenticate users and obtain access tokens + +## OAuth2 integration getting started tutorial + +After completing the primary tutorial, explore OAuth2 patterns with external services: + +[Integrate with Google Drive using OAuth2](./identity-getting-started-google.html) @@ -13 +31,0 @@ By the end of this section, you'll have a working agent that can retrieve access -###### Topics @@ -15 +33 @@ By the end of this section, you'll have a working agent that can retrieve access - * [Prerequisites](./identity-getting-started-prerequisites.html) +**Focus:** OAuth2 flows and Google Drive integration @@ -17 +35 @@ By the end of this section, you'll have a working agent that can retrieve access - * [Step 1: Import Identity and Auth modules](./identity-getting-started-step1.html) +**What you'll learn:** Set up OAuth2 credential providers, obtain access tokens, and integrate with Google services @@ -19 +37 @@ By the end of this section, you'll have a working agent that can retrieve access - * [Step 2: Set up an OAuth 2.0 Credential Provider](./identity-getting-started-step2.html) +**Best for:** Understanding OAuth2 authentication patterns with real external services @@ -21 +39,16 @@ By the end of this section, you'll have a working agent that can retrieve access - * [Step 3: Obtain an OAuth 2.0 access token](./identity-getting-started-step3.html) +## Common prerequisites + +Both tutorials require the following: + + * An AWS account with appropriate permissions + + * Basic familiarity with Python programming + + * Understanding of OAuth2 concepts (recommended) + + + + +Each tutorial includes specific setup instructions and additional prerequisites as needed. + +###### Topics @@ -23 +56 @@ By the end of this section, you'll have a working agent that can retrieve access - * [Step 4: Use OAuth2 Access Token to Invoke External Resource](./identity-getting-started-step4.html) + * [Build your first authenticated agent](./identity-getting-started-cognito.html) @@ -25 +58 @@ By the end of this section, you'll have a working agent that can retrieve access - * [What's Next?](./identity-getting-started-whats-next.html) + * [Integrate with Google Drive using OAuth2](./identity-getting-started-google.html) @@ -38 +71 @@ Example use cases -Prerequisites +Build your first agent