Question

A financial services company builds a single Amazon Bedrock Knowledge Base backed by Amazon OpenSearch Serverless. It ingests documents from three S3 buckets: one with public marketing content, one with internal HR policies, and one with confidential M&A deal documents restricted to a small deal team. All employees can query the same chatbot application, but each user must only receive answers derived from documents they are authorized to see. The team wants to avoid building and maintaining three separate Knowledge Bases. What is the most effective approach?

Accepted Answer

Attach metadata attributes (e.g., a classification/access-group field) to documents during ingestion and apply metadata filters at query time based on the authenticated user's entitlements when calling Retrieve or RetrieveAndGenerate.

Answer

Rely on the S3 bucket policies and IAM permissions of the source buckets; Bedrock Knowledge Bases automatically enforce the originating bucket's access controls at retrieval time.

Answer

Encrypt each S3 bucket with a different KMS key so that only users with access to the corresponding key can retrieve the associated vectors from OpenSearch Serverless.

Answer

Use a Bedrock Guardrail with a denied-topics policy to block the model from generating responses that reference confidential M&A or HR content for unauthorized users.