AIToday
Large Language ModelsAI Business & IndustryAmazon AI BlogPublished: Oct 21, 2026, 01:00 JST

AtScale semantic layer bridges agents and BI on Amazon Bedrock AgentCore

Send on LINE
AtScale semantic layer bridges agents and BI on Amazon Bedrock AgentCore

3 Key Points

  1. What happened

    AWS's third semantic-layer post builds a Customer 360 model with AtScale C2026.7 on Amazon Redshift, exposing it to a Strands agent on Amazon Bedrock AgentCore via AtScale's MCP server.

  2. Why it matters

    Because access control and metric definitions sit in the semantic layer, an agent and existing BI tools get the same computed answer, which enterprises can reuse without rebuilding governance per consumer.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Context & Analysis

This is the third entry in a series that has kept the same Customer 360 request while swapping the semantic layer underneath it — first Stardog's knowledge graph, then Denodo's data virtualization, now AtScale's dimensional model. The shift is architectural: Stardog and Denodo federate at query time across engines, whereas AtScale plans a dimensional query as native warehouse SQL and pushes it to one engine per query. In this walkthrough, all analytical C360 data lives in Amazon Redshift Serverless, with Amazon Aurora PostgreSQL kept as the operational system of record and a replication path keeping the analytical copy current.

The trade-off is explicit in the post. Consolidating into one engine rules out the live cross-engine federation the earlier two layers perform, but it lets AtScale's planner and autonomous aggregate management work against a single-engine execution model. That matters for agent-driven workloads, which fire more queries than a human analyst would; matching queries get routed to pre-built summary tables in the warehouse rather than rescanning the fact table.

Governance is framed as identical across consumers: one row-security object, one perspective, and one set of role bindings apply whether the caller is the agent over MCP, Excel over XMLA, or a notebook over JDBC. The series' two prior posts did not capture both the LLM-written query and the warehouse-executed query in a single record, which the post presents as the audit advantage here.

FAQ
What exactly does the AtScale model expose to the agent and BI tools?
One deployed dimensional model is reachable over SQL, XML for Analysis (XMLA), and the Model Context Protocol (MCP). That lets JDBC-based tools, Excel and Power BI, and the Strands agent query the same definitions.
How does the human user's identity reach the warehouse?
The user's JWT goes through AgentCore Gateway to AgentCore runtime, and AgentCore Identity supplies an OAuth 2.0 access token from AtScale's bundled Keycloak mapped to that user. The warehouse is then reached with the AtScale connection identity from AWS Secrets Manager.
What can a marketing user see versus an HR user?
The hr_user role sees the full Customer 360 model including ssn and card_num. The marketing_user role sees a Marketing perspective that hides ssn and card_num at the model layer.
Amazon AI BlogRead Original Article
Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.

Questions and answers are published on this page.

Related Articles

Next articleVectorial raises $3 million to simulate consumers for research