Implement on-behalf-of token exchange for multi-tenant agents with Amazon Bedrock…

AWS guide details OAuth token exchange to propagate user identity when Bedrock agents call downstream APIs in multi-tenant architectures. Includes reference architecture and code for AgentCore Gateway to maintain audit trails.