Monthly Buzz - September - Insights

Forum|Forum|2 hours ago
September 30, 2026
0 replies
14 views

AgentCore gateways, tokens, and identities join the attack path

AI agents don't ask for permission the way people do. They hold tokens, call gateways, and borrow the privilege of whatever identity spun them up. Insights now brings the identity layer of Amazon Bedrock AgentCore into the graph and connects it to the IAM principals, Okta apps, and Entra ID applications on either side.

What you get with this update

Your AgentCore estate, connected: Gateways, gateway targets, workload identities, and OAuth2 credential providers are now graph entities, wired the way AWS runs them
- Gateway to target
- Target to the Lambda or agent runtime it fronts
- Gateways and runtimes to the workload identities they act as
  Each runtime version is its own non-human identity, so a version with a new execution role doesn't quietly overwrite what you reviewed last quarter.

Continue Reading HERE

What are connectors?

Connectors connect third-party software to Identity Security Insights to give you a comprehensive view of your security posture.

How are they useful?

Connectors help you address critical identity and privilege risks, ensuring a more secure environment with:

Comprehensive visibility: They provide a holistic view of your organization's privilege landscape, identifying both hidden and known privileges across multiple systems.
Proactive detection: By continuously monitoring and analyzing identity and account information, they can detect potential security threats before they become critical issues.
Automated updates: Once configured, the connectors automatically pull data and update dashboards and reports with new or changed recommendations and detections.
Simplified management: They simplify identity security management by providing easy-to-deploy connectors across on-premises, cloud, and SaaS environments.

Connectivity status

Connectors with a Status set to On actively scan and provide recommendations for the source service. Connectors with a status of Off are paused and do not scan the service or provide new recommendations until manually turned on.

Connectivity displays whether or not the connector is appropriately configured.