用 AgentCore Gateway 与 MCP 构建多账户 AI agent
原标题：Build a multi-account AI agent with AgentCore Gateway and MCP
AI 摘要
AWS 博客介绍如何用 Amazon Bedrock AgentCore Gateway 与 MCP 构建多账户 AI agent 架构。方案中平台账户托管 agent 与 Amazon Bedrock 推理，各业务线账户将数据与工具封装为 MCP server，Gateway 作为统一端点聚合工具发现与调用。文章还涉及跨账户 MCP 集成、AgentCore Identity 与 Okta 认证、基于 Policy 的细粒度授权及治理控制。
正文节选
Build a multi-account AI agent with AgentCore Gateway and MCP Enterprises increasingly want AI agents that can reason over data spread across many AWS accounts without copying or centralizing it. Each team keeps its data in its own account for good reasons: clear ownership, scope isolation, and independent deployment lifecycles. But an agent that sees only one account’s data delivers limited value, and connecting it to distributed sources usually means replicating data or untangling cross-accoun