https://xiongpin.dev/tags/security/ Recent content in Security on Pin Xiong Hugo -- gohugo.io en © 2026 Pin Xiong Thu, 22 Oct 2026 00:00:00 +0000 https://xiongpin.dev/posts/agentcore-gateway-and-identity/ Thu, 22 Oct 2026 00:00:00 +0000 https://xiongpin.dev/posts/agentcore-gateway-and-identity/ <p>An agent that can reach a real system usually carries that system&rsquo;s key, and the key outlives every rotation policy you wrote. This article builds the opposite: an operations assistant that reaches an order service, a ticketing function and a CRM through one AgentCore Gateway, proves a caller with a JWT, and holds nothing but the ARN of a secret. Every number was measured in one account, in <code>us-east-1</code>.</p>