Skip to content

Blog · Tag

#cedar

1 post tagged #cedar.

Field Notes: A Gateway policy can't see the user if your agent calls with its own token

A re:Post question asked how to stop an AgentCore agent acting beyond the user who asked. I built a demo to find out. A Cedar policy does nothing if the agent calls with its own token. Two gotchas, and the real limit: a stale token claim.