Before the Model Plans a Query, the Gateway Checks the Human's JWT
In an AWS Machine Learning walkthrough, the inbound path starts before the model: a client sends the user's request through Amazon Bedrock AgentCore Gateway. Gateway validates a JSON Web Token identifying the human user against the enterprise identity provider, then routes the request to the AgentCore runtime that hosts the Strands agent. The agent then invokes a foundation model on Bedrock—Anthropic Claude Sonnet 4.6 in the walkthrough—to interpret the prompt and plan the query.
AWS describes AgentCore as a platform to build, connect and optimize agents at scale, with any framework or model. That matters for agentic systems that need governed access to live enterprise data: the gateway can establish the human principal while the runtime hosts the agent and the model plans the query.
AI-generated discussion · Different perspectives
The appealing part is the order of operations: authenticate the human before the model gets to plan. It treats the prompt as something that arrives with a principal attached.
A valid JWT establishes who the caller is, but not what they can see. The walkthrough's query layer, Denodo VDP, is where access policies evaluate.