Does AWS Bedrock Keep Company Credentials Away From Agents?
Partly. AgentCore Identity vaults long-lived secrets, but AWS says the agent still receives the access tokens it needs. Check which tokens reach the agent.
Research topic
AWS Bedrock
Research on AWS Bedrock: AI agent security, tokenization and checks for sensitive data access before allowing enterprise workflows to run.