Amazon released Amazon Quick and Amazon Bedrock Knowledge Bases with real-time access control enforcement, addressing a critical security challenge for enterprises. It is the company's first major update to its AI infrastructure since the launch of Amazon Bedrock in 2023.
Amazon reported that the new system enforces access control lists (ACLs) in real time, verifying permissions directly with authoritative sources at query time. That compares with previous approaches that relied on periodic syncs and stored ACLs, which could lead to security gaps.
The product is built on AWS's machine learning and data management infrastructure and targets enterprises using Retrieval Augmented Generation (RAG) to unlock insights from internal knowledge sources. Availability begins in early 2024, initially for organizations with complex permission structures.
"When we set out to evaluate AI solutions for our organization, our security and compliance teams were clear about their top priority: ensuring that colleagues would only ever see information they’re authorized to access," said Jamahl Wiggins, Sr. Specialist – M365 Innovation, Mondelēz International.
The system gave their internal review board the confidence to move forward and set a strong foundation for how they think about AI governance going forward.
The announcement follows growing demand for secure AI deployment in enterprises. Amazon said the new approach improves security by ensuring AI-generated answers include only content a user is authorized to access.
Amazon did not say how the system handles legacy data sources, and it raised the question of how to maintain performance while ensuring real-time checks. The company said it will continue to refine the system as data sources evolve.
Source: awsml