Câu trả lời nhanh
Amazon Bedrock AgentCore Gateway's new on-behalf-of token exchange dynamically isolates merchant database access per chat session, preventing cross-brand data leaks on multi-tenant Thai e-commerce marketplaces.
Quay lại Blog
|29 July 2026
How Thai Marketplaces Safely Deploy Multi-Tenant AI Shopping Assistants via Bedrock
Secure your multi-vendor conversational commerce platform using Amazon Bedrock AgentCore Gateway to prevent cross-brand data leaks.
i
iReadCustomer Team
Tác giả
Không có nội dung
Câu hỏi thường gặp
Câu hỏi thường gặp
What is Amazon Bedrock AgentCore Gateway?
It is an AWS security management layer that simplifies authenticating multi-tenant AI agents by dynamically issuing short-lived credentials restricted to specific tenants.
Why do Thai e-commerce marketplaces face cross-brand data leakage risks?
Most platforms connect multiple independent sellers to a centralized LLM. Without strict session isolation, the AI can cross-contaminate seller catalogs or customer personal details.
How does the On-Behalf-Of token exchange protect data?
It translates client identities into temporary, scoped AWS IAM credentials on the fly. These tokens expire automatically, giving the agent access only to that specific merchant's data.
Does this architecture support Thai PDPA compliance?
Yes, by enforcing strict cryptographic isolation between different merchants, it prevents accidental exposure of customer data, avoiding PDPA violations and up to 5 million THB in fines.
Can this system be integrated with multiple LINE Official Accounts?
Absolutely. You can route webhooks from multiple merchant LINE OAs to a single API Gateway, extract the merchant ID, and request isolated tokens from Bedrock dynamically.
