# Advanced features and topics for Amazon Bedrock AgentCore Memory
<a name="memory-advanced"></a>

This chapter describes how to front Amazon Bedrock AgentCore Memory with an AgentCore Gateway to add OAuth authentication for end users and fine-grained access control (FGAC). With these features, you can enforce per-user Memory isolation at the infrastructure layer — without distributing AWS credentials to end users — and restrict Memory so that it can be reached only through your gateway.

**Topics**
+ [Access AgentCore Memory through a gateway](memory-gateway-connector.md)