AUTHORIZING ACCESS TO DATA WITH RAG IMPLEMENTATIONS

Summary from the TLDR InfoSec newsletter

Retrieval-Augmented Generation (RAG) is commonly used by organizations to augment an LLM's knowledge base with additional information, such as internal documentation. RAG poses authorization risks as the LLM performs the search, so any authorization checks at the data source are skipped. This tutorial shows how to use S3 Access Grants with Amazon Bedrock Knowledge Bases to add authorization checks to the RAG flow.