AWS published a two-part AgentCore pattern using Okta Cross App Access to bind an agent to a signed-in user, exchange short-lived grants and enforce tool policy through AgentCore Gateway and Cedar. In AWS's test setup, removing a user stopped new grants in about one second while issued tokens lasted up to five minutes.
Why it matters: The pattern replaces shared agent service accounts with explicit user-and-agent identity and a measurable revocation window. It also shows that different target applications can have different consent and revocation behavior, so one identity design cannot be…
Okta, AWS, CrowdStrike, Databricks, Docker, Google Cloud, Lovable, Proofpoint, Salesforce, ServiceNow, Wiz and Zscaler formed the Blueprint Alliance and published an open reference architecture covering agent discovery, delegated access, runtime authorization and monitoring, and reversible containment.
Why it matters: The architecture gives security teams a common map for agent identity and execution evidence across vendors instead of treating every agent platform as a separate control plane.
Snowflake moved Cortex AI Gateway into public preview as an OpenAI-compatible control plane for model routing, access, traces, budgets and per-user quotas across Snowflake and external providers. Some promised tool governance, abuse detection, trace intelligence and guardrails remain private preview or future work.
Why it matters: A gateway can centralize provider choice, identity, observability and spend without rewriting every client. Public preview makes those controls testable, but the maturity of routing, tool and safety features varies and must be checked individually rather…
Anthropic added workload identity federation for the Claude API. Supported workloads can exchange a signed OIDC token from AWS, Google Cloud, GitHub Actions, Kubernetes, Microsoft Entra, Okta, SPIFFE, and compatible providers for a short-lived Claude credential.
Why it matters: Short-lived federation can reduce long-lived Claude API key exposure in automated workloads and make identity policy more specific and revocable.