Enterprise identity on Amazon Bedrock AgentCore with Lark (Feishu) as the IdP. A Gateway Request Interceptor forwards the user's identity and injects a per-user credential — the agent never holds it — so downstream MCP tools act as the user against Lark and reach only what that user can.
bedrock-agentcore agentcore-memory agentcore-gateway agentcore-runtime lark-oauth enterprise-identity gateway-interceptor
-
Updated
Jul 10, 2026 - Python