Amazon Bedrock AgentCore Identity on EC2: A Step-by-Step GitHub OAuth Guide
Security Boulevard, Thursday, October 8th, 2026
A walkthrough of using Amazon Bedrock AgentCore Identity so an AI agent on EC2 can get OAuth tokens to call GitHub securely.
This Security Boulevard tutorial shows how to use the identity service of Amazon Bedrock AgentCore, AWS's platform for building and orchestrating AI agents, on its own with an agent running on EC2.
AgentCore Identity provides an agent-focused identity directory built on Cognito, a token vault for API keys and credentials, built-in two- and three-legged OAuth 2.0 and on-behalf-of token exchange, so agents can reach external resources without handling client secrets.
The guide builds a scenario in which the agent calls the AgentCore Identity API for an access token and uses it to access GitHub.