AWS announced a pattern that lets a single Bedrock agent serve many users while only returning documents each user can view. The solution injects the signed‑in user's email from a Cognito JWT into the tool call, then relies on Managed Knowledge Base’s ACL awareness to filter results. A Lambda interceptor and a Cedar policy verify the injected userContext before the search reaches the knowledge base.
Why it matters
Enterprises can deploy shared AI assistants without risking accidental data leakage between departments or SaaS customers.
