AWS releases an identity-aware AI data agent solution, using Lake Formation and trusted identity propagation to achieve per-user authorization
Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation
The AWS security blog introduces an identity-aware AI data agent solution that authorizes data agents based on the real user identity when querying Lake Formation-governed lakehouse data, without rewriting existing governance policies. The id_token does not enter the tool schema, and the base model cannot access it; the TIP role itself has no Lake Formation data permissions, and authorization decisions are made only for the propagated user identity. In testing, two users asked the same question; the authorized user received five records, while the unauthorized user was denied, and CloudTrail's AssumeRole events record the real user via onBehalfOf.
AWS 给出让 AI 数据智能体按真实用户身份查询湖仓的可部署方案，身份令牌全程绕开基础模型。