Amazon Bedrock AgentCore Identity now allows you to bring your own secrets with AWS Secrets Manager

Amazon Bedrock AgentCore Identity Updates

Amazon Bedrock AgentCore Identity now allows customers to reference existing AWS Secrets Manager secret ARNs directly in AgentCore Identity Credential Providers. This update enables full ownership of secret creation, classification, and governance without altering runtime usage.

What to do

• Create and manage secrets in AWS Secrets Manager using custom CMKs, tagging strategies, automatic rotation, and resource policies.
• Reference the existing secret ARN when configuring a Credential Provider in AgentCore Identity.

Amazon Bedrock AgentCore Identity bring your own secret is now generally available in 14 AWS Regions. For more information, visit the Amazon Bedrock AgentCore Identity documentation.

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.