Amazon adds real-time ACL verification to Quick and Bedrock Knowledge Bases for RAG
Amazon implemented a two-stage access-control approach for Amazon Quick and Amazon Bedrock Knowledge Bases: pre-retrieval ACL filtering against indexed attributes, followed by real-time verification with authoritative data sources (e.g., Google Drive APIs using service-account impersonation) to ensure RAG responses respect current permissions.