AWS and Strategy Show How Agents Can Query Governed Customer Data
AWS and Strategy Show How Agents Can Query Governed Customer Data
AI Agents & Automation

AWS and Strategy Show How Agents Can Query Governed Customer Data

AWS Machine LearningOct 20, 2026

AWS and Strategy outlined a customer-data workflow that connects a Strands agent to Strategy Mosaic while preserving caller-specific access controls.

AWS published a technical walkthrough on October 20, 2026, showing how Strategy Mosaic can serve as a governed data layer for an AI agent running on Amazon Bedrock AgentCore. The example builds a customer 360 view from Amazon Redshift and Amazon Aurora, linking two Mosaic models without an ETL step in the demonstrated setup.

A Strands agent hosted on AgentCore reaches Mosaic through its Model Context Protocol (MCP) server. The agent first discovers accessible projects and certified models, then retrieves the model’s business definitions before issuing a read-only query. Rather than asking the model to invent joins or business calculations, Mosaic supplies the relationships, metrics and permitted data paths. Strategy says Mosaic can also serve definitions to other tools through JDBC/ODBC over Trino, XMLA for Power BI and Excel, and REST for custom applications.

The walkthrough separates operational customer records and enrollment information in Aurora from purchase analytics in Redshift. Mosaic links the sources on shared customer attributes and plans queries across them. In one example, the agent ranks customers by lifetime spending and identifies those without rewards accounts. The post also describes using the same model for questions about customers in a particular state or top-selling products.

Identity and permissions are applied to the human caller rather than replaced with a shared service identity. The article describes row-level and object-level security, including a test in which a fraud analyst can access Social Security number data while a marketing analyst cannot. In a separate check, totals from the agent matched results obtained from the same certified model through an Excel PivotTable.

The post is the third entry in an AWS series comparing semantic-layer approaches for agentic analytics; earlier examples used Stardog and Denodo. For this Strategy Mosaic implementation, the authors also discuss choosing live-source or in-memory execution and exporting definitions in Apache Ossie format. The article documents an architecture and example workflow, not a general availability announcement for a new product.

Industry Impact

Governed agent access to customer data

Enterprise analytics and customer data management

Overview

The walkthrough shows how organizations can let an AI agent answer cross-source customer questions without bypassing existing access controls or relying on the agent to invent business definitions. For software developers and data teams, it offers a practical pattern for connecting Redshift and Aurora through a shared semantic layer. Security professionals can assess how caller-specific row- and object-level permissions carry into agent queries. The example is a technical workflow, not a general availability announcement, so near-term impact is architectural guidance rather than a confirmed product rollout.

Key Impact Points

Mosaic supplies certified definitions and data relationships, reducing the need for agents to infer joins or calculations.

A demonstrated customer 360 workflow queries Aurora and Redshift without an ETL step in that setup.

Caller-specific permissions are preserved, with an example distinguishing fraud and marketing analysts’ access to sensitive data.

Opportunities

Governed customer-data agent workflows

Enterprise data platforms and analytics

Organizations that want agents to answer customer questions across operational and analytical systems could adapt this pattern: connect certified models in Mosaic, expose them through its MCP server, and authenticate requests as the human caller. Potential implementations include customer 360 analysis, rewards-account checks, and product-sales questions, all grounded in defined metrics and permitted data paths. The article demonstrates one architecture, not a packaged commercial offering or proven deployment at scale. Systems integrators and internal data-platform teams could explore implementation and validation work, while organizations should test access rules and reconcile agent outputs with existing reporting before production use.

  • Caller-governed customer analytics for AI agents

    Problem: Customer records and purchase analytics sit in separate sources, while agents may lack reliable business definitions or appropriate access controls.

    Solution: Use Strategy Mosaic to link certified models and let an agent query them through MCP with caller-specific permissions.

    Target Users: Enterprise data-platform teams, analytics teams, and organizations building customer-facing or internal agent workflows.

    Business Value: Enable cross-source customer questions while retaining defined metrics, permitted data paths, and role-based access.

    Revenue Potential: The article does not quantify revenue. Implementation or integration services may be relevant for organizations adopting this architecture.

Reference link

https://aws.amazon.com/blogs/machine-learning/build-a-semantic-layer-for-agentic-ai-on-aws-with-strategy-mosaic-and-amazon-bedrock-agentcore

Image Source Link

https://d2908q01vomqb2.cloudfront.net/da4b9237bacccdf19c0760cab7aec4a8359010b0/2026/06/17/2026-aws-ny-summit-keynote.jpg

Community Discussion (0)

No discussions yet. Be the first to start the conversation!