AWS shows how to enforce per-user access in an agent's knowledge base search
AIAWS explains how to limit an agent's searches on Amazon Bedrock Managed Knowledge Base to the documents each user may view. The design has a request interceptor inject userContext from the verified token, with Policy in AgentCore and a resource-based policy as secondary defenses, so the LLM does not set user identity.
AIWhy it matters.
The post shows why an LLM must not supply the user identity for a knowledge base search, and how deterministic injection plus a policy check and a resource-based deny enforce per-user access.
Source details
AWS Machine Learning Blog · Renya Kujirada · aws.amazon.comPublished
Original title: Fine-grained access control for Amazon Bedrock Managed Knowledge Base tools