Cisco Duo adds tool-level authorization for AI agents
Cisco released Duo Agentic Identity in beta for AgentGateway, Envoy AI Gateway and Amazon Bedrock AgentCore Gateway. Duo Premier customers can apply identity- and group-based least-privilege policies to agent tools and retrieve authorization logs through the Admin API.
Why it matters: Agent permissions can now be evaluated at the tool boundary using enterprise identity rather than only inside prompts or application code. The authorization logs create a reviewable record of allowed and denied tool use.