AWS Adds Real-Time Access Checks to RAG in Amazon Quick and Bedrock Knowledge Bases

AWS has added real-time access control list checks to Amazon Quick and Amazon Bedrock Knowledge Bases, verifying user permissions directly with sources like Google Drive at query time.

The two-stage design first runs semantic search with cached ACLs, then confirms each candidate document against the authoritative source before passing passages to the LLM. This closes gaps where permissions changed between periodic syncs.