Advanced features and topics for Amazon Bedrock AgentCore Memory

This chapter describes how to front Amazon Bedrock AgentCore Memory with an AgentCore Gateway to add OAuth authentication for end users and fine-grained access control (FGAC). With these features, you can enforce per-user Memory isolation at the infrastructure layer — without distributing AWS credentials to end users — and restrict Memory so that it can be reached only through your gateway.