Amazon AWS ECS/Fargate Deploy Agents Integration

Amazon ECS on AWS Fargate is a serverless container platform from Amazon Web Services that runs containerized applications as ECS tasks without requiring teams to provision or manage servers or clusters.

Start for free

Amazon AWS ECS/Fargate Deploy Agents

Benefits with Ory + Amazon AWS ECS/Fargate Deploy Agents Integration

Ory integrates with Amazon Web Services' Amazon ECS on AWS Fargate to give teams a verified protection boundary for AI agents in production. Teams run an immutable agent container secured with Ory Agent Security as an ECS task on Fargate, with Agent Security attached to the workload from the moment it starts. Every gated tool call is checked against fine-grained authorization to permit or deny the action, and all activity is logged for a complete audit trail. Teams can start in Observe mode to see how agents use their tools, then switch to Enforce mode so agents act only within their authorized permissions.

The fastest way to get started with Ory Agent Security is to sign up for the Ory Network. Install the ory-agent CLI, then create an Agent Security deployment for AWS ECS/Fargate from the Ory Console or with the CLI from your agent's project directory.

brew install ory/tap/ory-agent

View AWS ECS/Fargate docs

Use Cases

— 03 use cases

Agent IAM

Secures agents running on AWS Fargate with a runtime identity, fine-grained authorization on every gated tool call, and complete audit logging.

Explore Agent IAM

CIAM

Lets teams ship customer-facing agents on AWS Fargate that act on behalf of end users with Ory-managed authentication and consent, following Ory best practices.

Explore CIAM

B2B IAM

Applies fine-grained authorization to every action agents take for business customers on AWS Fargate, with per-tenant task isolation on AWS, and scales with business growth.

Explore B2B IAM

Core Functionality

— 06 capabilities

Identity
Binds an Agent Security runtime identity to each ECS task so every agent is verified before it acts.
Authorization
Enforces fine-grained, policy-based access control for every gated tool call an agent makes on AWS Fargate.
Secrets
Keeps Agent Security runtime values out of the container image and supplies them to the task at deploy time.
Isolation
Runs each agent as an immutable container on serverless Fargate infrastructure, so the protected build is the build that runs.
Audit
Logs complete audit trails for agent sessions, tool invocations, and authorization decisions.
Rollout
Creates the deployment with Ory Deploy or the ory-agent CLI, ships the runtime package, and verifies the protection boundary, with Observe mode for monitoring and Enforce mode for strict permission enforcement.