Amazon Bedrock AgentCore Memory now supports fine-grained access control

This article announces fine-grained access control (FGAC) support for Amazon Bedrock AgentCore Memory, enabling per-user and per-tenant memory isolation through AgentCore Gateway.

• Front Memory resources with AgentCore Gateway configured for OAuth (JWT) authentication
• Attach Cedar policies to restrict access based on authenticated caller identity
• Enforce per-user data access and restrict memory records to user token-derived namespaces
• Allow or deny specific Memory operations per caller without custom authorization logic
• Move access control enforcement from application code to infrastructure layer using cryptographic identity proof
• Built on AgentCore Memory connector exposing 12 Memory operations as Cedar actions

FGAC for Memory simplifies access control implementation by leveraging infrastructure-level policy enforcement instead of application-level authorization logic.