- Inspect access before changing it.
- Retrieval relevance and permission checks are different questions.
The new controls
AWS announced CheckIngestedDocumentAcl and GetIngestedDocumentAcl for Bedrock Managed Knowledge Base. The first checks a specific user’s access to an ingested document; the second returns that document’s access-control list. The console also adds a document-access-control section.
Investigate the right failure
A missing retrieval result does not, by itself, prove an ingestion failure. Access restrictions may be involved. These diagnostic controls give administrators an additional observation; they do not automatically repair permissions or establish whether the underlying policy is appropriate.
Keep the investigation narrow
Start with one documented example: the intended user, the document identifier and the access expected by the data owner. Compare that expectation with the observed permission state before making changes. Avoid using broad access grants as a shortcut to improve retrieval. TLB has not independently tested the new APIs.
Read beyond this page.
Recorded source-check date: 10 Sep 2026. A link is not, by itself, evidence that every claim has been independently verified.
Changes & version history
Version 3 · 10 Sep 2026
Scheduled release of checksum-bound AI-assisted editorial review
Version 2 · 10 Sep 2026
Checksum-bound editorial review scheduled for release
Version 1 · 10 Sep 2026
Source-linked private review edition