# Propagate user authorization context in AI agents with Amazon Bedrock AgentCore

DevFeed: [Propagate user authorization context in AI agents with Amazon Bedrock AgentCore](<https://devfeed.tech/articles/propagate-user-authorization-context-in-ai-agents-with-amazon-bedrock-agentcore-4689.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/security/propagate-user-authorization-context-in-ai-agents-with-amazon-bedrock-agentcore/>)

Author: Anshu Bathla

Published: 2026-08-19T17:24:15Z

Content type: article

Language: en

Sources: [AWS Security Blog](<https://devfeed.tech/sources/aws-security-blog.md>)

Topics: [Amazon Bedrock AgentCore](<https://devfeed.tech/topics/amazon-bedrock-agentcore.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [AWS Identity and Access Management (IAM)](<https://devfeed.tech/topics/aws-identity-and-access-management-iam.md>), [Amazon Bedrock Knowledge Bases](<https://devfeed.tech/topics/amazon-bedrock-knowledge-bases.md>), [Amazon DynamoDB](<https://devfeed.tech/topics/amazon-dynamodb.md>), [Amazon S3](<https://devfeed.tech/topics/amazon-s3.md>), [prompt injection](<https://devfeed.tech/topics/prompt-injection.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Software as a service](<https://devfeed.tech/topics/saas.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [advanced-300](<https://devfeed.tech/tags/advanced-300.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [amazon-bedrock](<https://devfeed.tech/tags/amazon-bedrock.md>), [amazon-bedrock-agentcore](<https://devfeed.tech/tags/amazon-bedrock-agentcore.md>), [amazon-bedrock-knowledge-bases](<https://devfeed.tech/tags/amazon-bedrock-knowledge-bases.md>), [amazon-dynamodb](<https://devfeed.tech/tags/amazon-dynamodb.md>), [amazon-s3](<https://devfeed.tech/tags/amazon-s3.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [aws](<https://devfeed.tech/tags/aws.md>), [prompt-injection](<https://devfeed.tech/tags/prompt-injection.md>), [security-blog](<https://devfeed.tech/tags/security-blog.md>), [security-identity-compliance](<https://devfeed.tech/tags/security-identity-compliance.md>), [technical-how-to](<https://devfeed.tech/tags/technical-how-to.md>)

## AI overview

This article explains how to propagate user authorization context through AI agents built with Amazon Bedrock AgentCore. It presents a pattern for enforcing least-privilege access in downstream data services and infrastructure, so agents can access DynamoDB, Bedrock Knowledge Bases, S3-backed documents, and other sources only within the requesting user's permissions.

## Source excerpt

Many teams now deploy AI agents that pull from Amazon DynamoDB tables, document repositories, software as a service (SaaS) platforms, and internal knowledge bases to answer questions and automate workflows. A key risk in these deployments is that the agent has no awareness of who's asking, so it might return data the user shouldn't see. [...]