AWS Machine Learning Blog· Renya Kujirada·· 3 d ago
Fine-grained access control for Amazon Bedrock Managed Knowledge Base tools
Fine-grained access control for Amazon Bedrock Managed Knowledge Base tools
AI summary
Learn how to expose an Amazon Bedrock Managed Knowledge Base to AI agents as MCP tools through Amazon Bedrock AgentCore Gateway while keeping per-user access control. A request interceptor injects verified identity, Policy in AgentCore validates it independently, and a resource-based policy restricts direct access to the knowledge base.
Selection record
Threshold 60Official, first-handFirst 42Second 58
Not admittedSum of both 100 < twice the threshold 120
- Source tier
- Official, first-hand; this tier's threshold is 60
- Pre-filter
- passed：AWS博客详解Bedrock知识库AI Agent访问控制
A model scores each item twice, independently, against one written standard, out of 100. An item is admitted only when the two scores add up to twice the threshold. The threshold is set per source tier.
Source: AWS Machine Learning Blog · aws.amazon.com