Implement on-behalf-of token exchange for multi-tenant agents with Amazon Bedrock…

AWS details how to use the AgentCore Gateway's OBO token exchange pattern to propagate end-user identity through agent calls to downstream APIs. The pattern uses JWT tokens and avoids collapsing audit trails when multiple tenants share the same agent infrastructure.