Okta Cross App Access 与 Amazon Bedrock AgentCore 企业级智能体权限管控（二）
Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 2
Okta 和 AWS 教你搭企业级智能体权限体系：Gateway 统一管入口，Cedar 策略控到每个工具，还能在 CloudWatch 里看每一次放行和拒绝。
第二部分把 Part 1 的单智能体方案扩展到企业规模：Amazon Bedrock AgentCore Gateway 作为统一入口兑换 Okta 的授权，Cedar 策略将每个工具绑定到指定智能体。第二个智能体部署在 Amazon EKS 上运行。AgentCore Observability 记录每次允许与拒绝事件，与 Okta 日志一起呈现在 Amazon CloudWatch 中。
Govern AI agent access with Okta Cross App Access and Amazon Bedrock AgentCore – Part 2
In Part 1 you built one governed agent. Part 2 scales the pattern to an enterprise: Amazon Bedrock AgentCore Gateway becomes the single front door and redeems Okta's grant, Cedar policies bind each tool to the agent, a second agent runs on Amazon EKS, and AgentCore Observability traces every allow and deny beside Okta's log in Amazon CloudWatch.
