Bedrock AgentCore Gateway publishes a four-scope maturity model and real per-operation pricing for agent tool access
AWS Machine Learning Blogmedium signalAWS's August 21 post lays out Connect, Control, Catalog and Harden as staged scopes for governing agent tool access, from one SSO-backed MCP endpoint for 1-20 pilot users through identity-aware authorization with PII redaction, self-service tool publishing at 100+ users, and private connectivity for regulated environments. It supports Cognito-backed JWT, OAuth 2.0 Authorization Code + PKCE, Dynamic Client Registration and Private Key JWT, and works with Kiro, Claude Code, Cursor and Amazon Quick over MCP. The reference deployment number is unusually concrete: ~50 developers running 572,000 monthly operations cost about $17 for Gateway and Policy combined, at $5 per million InvokeTool calls and $25 per million policy authorizations.
↳ Follow the thread