Skip to content
K = 0.731
Original
TutorialsAWS Machine Learning BlogFrom the source· Deepakkumar Sharma·· 2 hours agoPicks

Securing AI Agent Identity with X.509 PKI on AWS

Securing AI agent identity with X.509 PKI on AWS

Who
AWS and Keyfactor engineering teams
What
demonstrated a reference architecture using X.509 PKI to secure AI agent communications
Quote
In this post, we show you how to address this gap using Keyfactor EJBCA combined with AWS services.

What happened

AWS and Keyfactor explain how to secure AI agent communications using X.509 PKI, Keyfactor EJBCA, and AWS services. The walkthrough combines signed request envelopes, user-signed delegation assertions, audience-scoped tokens, and real-time OCSP checks across user login, agent communication, and MCP tool access. It demonstrates the architecture with Amazon Bedrock, AWS Strands Agents SDK, and FastMCP, including replay prevention and credential revocation at logout.

Why it matters

The walkthrough offers a reusable pattern for binding tool requests to authorized users through agent certificates and signed delegation, with revocation checks at each trust boundary.

The story so far

AWS and Keyfactor demonstrated a reference architecture that uses X.509 public key infrastructure, Keyfactor EJBCA, and AWS services to secure AI agent communications. The walkthrough covers user login, communication between agents, and access to tools through the Model Context Protocol (MCP). The architecture combines signed request envelopes, user-signed delegation assertions, audience-scoped tokens, and real-time Online Certificate Status Protocol (OCSP) checks. The demonstration uses Amazon Bedrock, the AWS Strands Agents SDK, and FastMCP, and includes replay prevention and credential revocation at logout.

Deployment engineeringMCP and tool useTutorials#Tutorials and practice#MCP and tool calling#Deployment and engineering

Keep reading

Latest daily · Issue 27TorchNeuron brings native PyTorch support for Hugging Face models on AWS Trainium

Trending now

  1. 1DeepSeek Open-Sources DeepInfer and Companion Components, With Model and Hardware Limits
  2. 2Mistral Releases Voxtral 3 Speech Models and LiveKit-Based Voice Agent SDK
  3. 3Perplexity Adds Fully Local Mac Operation to Computer
  4. 4OpenAI Introduces Coding Evaluations and Reports Gains in Low-Resource Programming Languages

Tomorrow at 08:00, a briefing like this arrives in your inbox.

The same kind of briefing as the one above: a few stories worth reading. Free. Mail starts after you confirm, and every letter has a one-click unsubscribe. Read a past issue · 2026-10-20