Amazon Bedrock AgentCore adds OAuth Consent portal

Amazon Bedrock AgentCore now includes a managed Consent portal that streamlines the three‑legged OAuth (3LO) flow required for AI agents to access external services. Administrators create a portal linked to an AgentCore Gateway, configure the corporate identity provider and target services, and then share the generated URL with end users. The portal authenticates users with the organization’s IdP, presents the available providers, handles browser redirects, performs session binding, and stores the resulting tokens in the AgentCore Identity token vault.

The feature is illustrated with a development‑assistant scenario where users grant separate GitHub and Slack permissions. After signing in, a user can connect each provider independently; the portal records each grant without repeated prompts. This managed experience is especially useful for agents invoked from IDEs and Model Context Protocol clients such as Kiro, Claude Code, Cursor, and Visual Studio Code, reducing the need for custom OAuth infrastructure.