SailPoint Agent Identity Security for AI agents on Amazon Bedrock AgentCore

This article describes SailPoint's Agent Identity Security (AIS) solution, which extends identity governance to AI agents deployed on Amazon Bedrock AgentCore, addressing security gaps in autonomous AI systems.

• 80% of organizations report AI agents performing unintended actions; traditional IAM approaches inadequate for autonomous systems
• AIS enables automatic discovery, ownership assignment, access reviews, and permission revocation for AI agents
• Built on AWS services including Amazon EKS, Amazon RDS, Amazon MSK, and Amazon ElastiCache for scalable governance
• Integrates with Amazon Bedrock AgentCore Identity for unified agent discovery and governance across AWS environments
• Provides centralized console for visibility into agent permissions, compliance certification campaigns, and audit trails
• Planned enhancements include agent-to-agent authentication and dynamic permission adjustment based on context

AIS eliminates the trade-off between rapid AI agent deployment and security by applying enterprise-grade identity governance to autonomous systems at scale.