AWS announced that Amazon Quick and Amazon Bedrock Knowledge Bases now enforce access control lists (ACLs) in real time. When a user asks a question, the system first filters candidates with cached ACLs, then calls the source service—like Google Drive—to confirm the user still has permission before feeding the content to the LLM. This avoids stale or mismapped permissions that can expose confidential files.
Why it matters
Enterprises can trust AI assistants to respect the latest document permissions, reducing the risk of accidental data leaks.
