AWS and Keyfactor publish X.509 PKI reference architecture for AI agents
AWS and Keyfactor released a joint reference architecture showing how to use Keyfactor EJBCA with AWS services (including Amazon Bedrock and the AWS Strands Agents SDK) to provide cryptographic X.509 identities for AI agents. The design uses signed request envelopes, user-signed delegation assertions, RFC 8693 audience-scoped tokens, and real-time OCSP revocation; example source code is available on GitHub.