AWS 为 Bedrock AgentCore 推出 AI 智能体 OAuth 同意门户
原标题：Manage end-user OAuth consent for AI agents with Amazon Bedrock AgentCore
AI 摘要
AWS 在 Amazon Bedrock AgentCore 的 AgentCore Identity 中推出 Consent portal（同意门户），为 AgentCore Gateway 提供托管式网页体验和会话绑定端点。此前客户需自行搭建会话绑定基础设施，现在管理员只需为网关创建门户并分享 URL，用户通过企业 IdP 登录后即可按提供商逐个授权，门户自动处理浏览器重定向和会话绑定，令牌存入 AgentCore Identity 的 token vault。该能力适用于 Kiro、Claude Code、Cursor、VS Code 等 IDE 和 MCP 客户端，用户可在调用工具前授权，后续工具调用复用已存储的令牌。
正文节选
Manage end-user OAuth consent for AI agents with Amazon Bedrock AgentCore AI agents often need to access services such as GitHub and Slack on a user’s behalf. Before an agent can act, the user must authenticate with the provider and explicitly approve the requested access. The application must then securely associate the resulting OAuth grant with the user who authorized it. This process is called session binding. Previously, customers using the AgentCore Identity (a capability of Amazon Bedrock