AWS explains per-user access control for Bedrock Managed Knowledge Base tools
Overview
AWS Machine Learning Blog explains how to limit an agent's searches on Amazon Bedrock Managed Knowledge Base to the documents each user is allowed to view.
A request interceptor injects user context from the verified token, so the LLM does not set user identity. Policy in AgentCore and a resource-based policy serve as secondary defenses.
Adapting the pattern to an existing Amazon Cognito user pool requires the pool to be on the Essentials or Plus feature plan, because access token customization needs one of those plans.
Written by AI from the articles below · updated Nov 12, 10:43 AM ET
Check the sources:
Article timeline
The articles in this story. Times are ET.
- AWS Machine Learning BlogOfficialPickAWS shows how to enforce per-user access in an agent's knowledge base search
AIAWS explains how to limit an agent's searches on Amazon Bedrock Managed Knowledge Base to the documents each user may view. The design has a request interceptor inject userContext from the verified token, with Policy in AgentCore and a resource-based policy as secondary defenses, so the LLM does not set user identity.
Heat Trend
Not enough continuous observations to show a trend yet.