Amazon Bedrock Managed Knowledge Base adds APIs and console support for debugging document-level access control

Amazon Bedrock Managed Knowledge Base introduces the CheckIngestedDocumentAcl and GetIngestedDocumentAcl APIs. These APIs allow customers to verify if a specific user has access to a given ingested document and retrieve the full access control list (ACL) attached to a document, enabling auditing of permissions and detection of misconfigurations. The console adds a new Document Access Control section on the data source details page, where users can check access by entering a document ID and user email, or retrieve a document's full ACL by document ID. Together, these features provide administrators with the visibility needed to manage access control at scale across enterprise knowledge bases.

Why it matters

Amazon Bedrock Managed Knowledge Base securely connects enterprise documents and databases to large language models. This update provides administrators with tools to efficiently verify and correct access control settings, improving security management for knowledge bases.