Amazon Cognito adds scoped token exchange for services and AI agents

Published Thursday, November 12, 2026 · 7:18 PM EST

AWS has added OAuth 2.0 token exchange to Amazon Cognito, allowing services and AI agents acting for a user to obtain credentials limited to a downstream service. Previously, intermediaries had to forward the user's original token or maintain their own token creation logic. The replacement token can carry narrower permissions, target a single service and omit a refresh token. An optional actor token records the intermediary's identity so downstream services can distinguish delegated requests from direct user requests. The feature is available on Cognito's Essentials and Plus plans in every AWS Region where Cognito operates.

Sources

Recent Announcements

In this story

Amazon

Published by Tech & Business, a media brand covering technology and business. This story was sourced from Recent Announcements and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Products

Microsoft 365 outage disrupts email, collaboration and AI connectors

Microsoft 365 connectivity problems disrupted multiple services Thursday, with Microsoft identifying elevated infrastructure load across multiple regions, CNET reported. Its service alert named Exchange Online, Teams, SharePoint Online, Copilot 365 and Microsoft Defender XDR.

Security

Researchers report 21 N-central servers compromised through new exploit

Attackers have compromised at least 21 production N-able N-central servers through a newly disclosed exploit chain, security company Huntback told BleepingComputer. Nineteen ran the latest Hotfix 2 release, issued November 10. The attacks installed XMRig cryptocurrency miners.

Capital AI

Orakl Oncology raises $34M to expand cancer drug prediction platform

Paris-based Orakl Oncology has raised a $34M Series A co-led by Norrsken VC and Singular, bringing total funding to $50M.

Capital AI

Axle raises $9M for investment bank meeting software and AI agents

Axle raised $9M in a round led by Eniac and Bonfire Ventures, with Teamworthy Ventures also participating, the startup announced Thursday. Its software helps investment banks arrange meetings between investors and company management, analysts and industry experts.

Capital AI

Hatz AI raises $24M for tools serving small-business technology providers

New York-based Hatz AI raised a $24M Series A, CRN reported. The company makes tools for managed services providers, which help small businesses adopt AI. Its customers serve businesses seeking help with the transition to AI-based work.

Security

Apple patches nine HomeView vulnerabilities before first customer deliveries

Apple released HomeView Software Version 27.2 on November 12, fixing nine security vulnerabilities before the first devices reach customers tomorrow. The update includes a fix for a flaw that could let a remote attacker join an iMessage group chat and receive its messages.