Implementing defense-in-depth authorization for MCP tools on Amazon Quick
aws ·
The AWS blog explains how to implement defense-in-depth authorization for each MCP tool invocation in Amazon Quick, in addition to validating an access token. The design uses a Lambda REQUEST interceptor attached to an existing Amazon Bedrock AgentCore Gateway to evaluate OIDC JWT claims through MFA enforcement, optional country geo-fencing, group-based role authorization, and tool-level permission checks. Microsoft Entra ID provides the identity configuration, including resource and client applications, token claims, security groups, and a Conditional Access policy requiring MFA. Group RBAC and tool permissions form the core controls, while the MFA claim check and country restriction can be enabled according to compliance needs. In the fictional AnyCompany risk-register example, readers can query data, authors can perform mutations, and administrators receive broader operational access; failed checks return a 403 before the tool or its data is reached. Tool functions also recheck permissions, and successful mutations create immutable audit records, while the walkthrough covers connecting Amazon Quick, testing different user personas, and troubleshooting common configuration issues.
aws