Configure a consent portal

A consent portal is a hosted, AWS-managed portal that authenticates your end users to an OpenID Connect (OIDC) identity provider (IdP) and gathers their consent before your agent accesses a downstream resource on their behalf. Each consent portal attaches to a single Amazon Bedrock AgentCore Gateway (its source) and uses an OAuth2 credential provider to reference the same IdP that the gateway’s inbound JWT authorizer trusts. The portal keeps the OAuth flow server-side: the browser never holds a token.

The following topics describe how to set up and manage a consent portal. Before you create a portal, review and complete the prerequisites.

Topics

• Consent portal prerequisites

• Consent portal execution role

• Create a consent portal with the console

• Create a consent portal with the AWS CLI

• Configure a consent portal target

• Update a consent portal

• Delete a consent portal