What changed
Cisco released Duo Agentic Identity in beta for AgentGateway, Envoy AI Gateway and Amazon Bedrock AgentCore Gateway. Duo Premier customers can apply identity- and group-based least-privilege policies to agent tools and retrieve authorization logs through the Admin API.
Why it matters
Agent permissions can now be evaluated at the tool boundary using enterprise identity rather than only inside prompts or application code. The authorization logs create a reviewable record of allowed and denied tool use.
What to do
Canary one non-sensitive agent with a disposable identity. Deny an unapproved tool, verify group changes and revocation, inspect authorization logs, test gateway failure behaviour, and document the fallback before connecting production credentials.
Caveat
The feature is a Duo Premier beta. Cisco does not publish independent security testing, policy-latency measurements, fail-open or fail-closed details for every integration, or a general-availability commitment in the release note.