Amazon Quick 中 MCP 工具的防御性授权实现方法
Implementing defense-in-depth authorization for MCP tools on Amazon Quick
想给 MCP 工具加个更细粒度的权限控制？这篇教程教你用 Amazon Quick 和 Bedrock AgentCore Gateway，结合微软的 Entra ID，实现基于角色的和基于属性的访问控制，还能留个不可变的审计日志。
本文介绍如何通过 Amazon Bedrock AgentCore Gateway 中间件，结合 Microsoft Entra ID 组和声明式 JWT，为 Model Context Protocol (MCP) 工具实现基于角色的访问控制（RBAC）和基于属性的访问控制（ABAC），确保每用户、每工具的权限隔离，并支持服务器端检查和不可变审计追踪。
Implementing defense-in-depth authorization for MCP tools on Amazon Quick
Learn how to enforce defense-in-depth authorization for Model Context Protocol (MCP) tools on Amazon Quick. This walkthrough wires Microsoft Entra ID group and claims-based JWTs through an Amazon Bedrock AgentCore Gateway interceptor to apply per-user, per-tool role-based and attribute-based access control, with a server-side check and an immutable audit trail.