AWS adds Policy and Lambda interceptors to Amazon Bedrock AgentCore gateway for securing AI agent access to tools

Amazon Bedrock AgentCore gateway now supports two security mechanisms: Policy (using Cedar, a declarative policy language for deterministic access control) and Lambda interceptors (for dynamic validation, payload enrichment, token exchange, and response filtering).

Policy enforces permit or forbid rules evaluated over a principal, an action, and a resource with optional conditions; Lambda interceptors run before or after each tool call to transform requests by replacing bearer tokens with tenant-scoped credentials and filter responses. The gateway evaluates the request interceptor before the Cedar policy, enabling interceptors to enrich request context for policy evaluation.

In a lakehouse data agent example for an insurance company, the solution restricts tool access by user role (policyholders, adjusters, administrators) through policy forbid rules, and implements geography-based access control by combining both mechanisms with AWS Lake Formation row-level and column-level security enforcement.