AWS adds per-user controls to Bedrock AgentCore Memory

AWS said Bedrock AgentCore Memory now supports fine-grained access control through AgentCore Gateway. Customers can use OAuth JWT authentication and Cedar policies to restrict memory access by authenticated caller, namespace, or Memory operation. AWS said the managed connector exposes 12 Memory operations as Cedar actions and moves enforcement from application code to the infrastructure layer. The capability is intended to isolate memory for individual users and tenants without custom authorization logic.