AWS bedrock documentation change
Summary
Added documentation about encryption integration with Amazon S3 Vectors, including KMS key usage and preview notice
Security assessment
The change adds details about encryption mechanisms for Amazon S3 Vectors integration, which is a security feature. However, there is no evidence of addressing a specific security vulnerability.
Diff
diff --git a/bedrock/latest/userguide/encryption-kb.md b/bedrock/latest/userguide/encryption-kb.md index 8c6cd52a9..dedf5c807 100644 --- a//bedrock/latest/userguide/encryption-kb.md +++ b//bedrock/latest/userguide/encryption-kb.md @@ -5 +5 @@ -Encryption of transient data storage during data ingestionEncryption of information passed to Amazon OpenSearch ServiceEncryption of knowledge base retrievalPermissions to decrypt your AWS KMS key for your data sources in Amazon S3Permissions to decrypt an AWS Secrets Manager secret for the vector store containing your knowledge base +Encryption of transient data storage during data ingestionEncryption of information passed to Amazon OpenSearch ServiceEncryption of information passed to Amazon S3 VectorsEncryption of knowledge base retrievalPermissions to decrypt your AWS KMS key for your data sources in Amazon S3Permissions to decrypt an AWS Secrets Manager secret for the vector store containing your knowledge base @@ -42,0 +43,2 @@ Amazon Bedrock knowledge bases uses TLS encryption for communication with third- + * Encryption of information passed to Amazon S3 Vectors + @@ -57,0 +60,6 @@ To allow the creation of a AWS KMS key for transient data storage in the process +JSON + + +**** + + @@ -78,0 +88,8 @@ If you opt to let Amazon Bedrock create a vector store in Amazon OpenSearch Serv +## Encryption of information passed to Amazon S3 Vectors + +If you opt to let Amazon Bedrock create an S3 vector bucket and vector index in Amazon S3 Vectors for your knowledge base, Amazon Bedrock can pass a KMS key that you choose to Amazon S3 Vectors for encryption. To learn more about encryption in Amazon S3 Vectors, see [Encryption with Amazon S3 Vectors](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-vectors-bucket-encryption.html). + +###### Important + +The Amazon S3 Vectors integration with Amazon Bedrock Knowledge Bases is in preview release and is subject to change. + @@ -135,0 +153,6 @@ If you do so, you attach the following policy to your Amazon Bedrock service rol +JSON + + +**** + +