AWS bedrock documentation change
Summary
Added requirements for secret key names and metadata filtering configuration in MongoDB Atlas
Security assessment
The changes specify credential storage requirements and metadata filtering prerequisites. These updates help prevent misconfiguration-related security issues but don't address a specific known vulnerability. Proper secret management is emphasized.
Diff
diff --git a/bedrock/latest/userguide/knowledge-base-setup.md b/bedrock/latest/userguide/knowledge-base-setup.md index 8cfb0b66a..487177260 100644 --- a//bedrock/latest/userguide/knowledge-base-setup.md +++ b//bedrock/latest/userguide/knowledge-base-setup.md @@ -517 +517 @@ When you set up the vector store, note the following information which you will - * **Credentials secret ARN** – The Amazon Resource Name (ARN) of the secret that you created in AWS Secrets Manager that contains the username and password for a database user in your MongoDB Atlas cluster. + * **Credentials secret ARN** – The Amazon Resource Name (ARN) of the secret that you created in AWS Secrets Manager that contains the username and password for a database user in your MongoDB Atlas cluster. The secret must contain keys named `username` and `password`. @@ -538,0 +539,4 @@ There are additional configurations for **Field mapping** that you must provide +###### Important + +If you plan to use metadata filtering with your MongoDB Atlas knowledge base, you must manually configure filters in your vector index. Metadata filtering doesn't work by default and requires additional setup in your MongoDB Atlas vector index configuration. +