Build a semantic layer for agentic AI on AWS with Denodo and Amazon Bedrock AgentCore

Amazon's walkthrough shows how to build a semantic layer with the Denodo Platform on AWS so an agent hosted on Amazon Bedrock AgentCore can query governed enterprise data.

• It follows an earlier post that used Stardog's knowledge graph, swapping in Denodo and adding a source outside AWS.
• The customer 360 example federates Amazon Aurora, Amazon Redshift and an on-premises PostgreSQL cluster, where the rewards_account table sits, into a single view the agent queries in VQL, Denodo's SQL dialect.
• Denodo plans the federated query at execution time, deciding what to push into Aurora, what to push into Redshift, what to fetch from the on-premises cluster, and how to combine the results, with no data moving between sources.
• The Denodo MCP Server exposes governed views to the agent through the Model Context Protocol and is registered as an AgentCore Gateway target, while AgentCore terminates inbound authentication and manages the outbound credential the agent presents to Denodo.
• The post also covers how the end user's identity flows from the enterprise identity provider through AgentCore Identity On-Behalf-Of token exchange, and how Global Security Policies apply row and column filters at query time.
• Denodo can be deployed on AWS as the fully managed Agora service or self-managed on Amazon EC2 or Amazon EKS.