# Amazon Bedrock Knowledge Bases

Amazon Bedrock Knowledge Bases is an AWS service for integrating proprietary data into generative-AI applications through retrieval-augmented generation, with managed or customer-managed ingestion, indexing, storage, and retrieval infrastructure.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Propagate user authorization context in AI agents with Amazon Bedrock AgentCore

DevFeed: [Propagate user authorization context in AI agents with Amazon Bedrock AgentCore](<https://devfeed.tech/articles/propagate-user-authorization-context-in-ai-agents-with-amazon-bedrock-agentcore-4689.md>)

Original publisher: [Read original article](<https://aws.amazon.com/blogs/security/propagate-user-authorization-context-in-ai-agents-with-amazon-bedrock-agentcore/>)

Author: Anshu Bathla

Published: 2026-08-19T17:24:15Z

Content type: article

Language: en

Sources: [AWS Security Blog](<https://devfeed.tech/sources/aws-security-blog.md>)

Topics: [Amazon Bedrock AgentCore](<https://devfeed.tech/topics/amazon-bedrock-agentcore.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [AWS Identity and Access Management (IAM)](<https://devfeed.tech/topics/aws-identity-and-access-management-iam.md>), [Amazon Bedrock Knowledge Bases](<https://devfeed.tech/topics/amazon-bedrock-knowledge-bases.md>), [Amazon DynamoDB](<https://devfeed.tech/topics/amazon-dynamodb.md>), [Amazon S3](<https://devfeed.tech/topics/amazon-s3.md>), [prompt injection](<https://devfeed.tech/topics/prompt-injection.md>), [Amazon Web Services](<https://devfeed.tech/topics/aws.md>), [Software as a service](<https://devfeed.tech/topics/saas.md>)

Tags: [access-control](<https://devfeed.tech/tags/access-control.md>), [advanced-300](<https://devfeed.tech/tags/advanced-300.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [amazon-bedrock](<https://devfeed.tech/tags/amazon-bedrock.md>), [amazon-bedrock-agentcore](<https://devfeed.tech/tags/amazon-bedrock-agentcore.md>), [amazon-bedrock-knowledge-bases](<https://devfeed.tech/tags/amazon-bedrock-knowledge-bases.md>), [amazon-dynamodb](<https://devfeed.tech/tags/amazon-dynamodb.md>), [amazon-s3](<https://devfeed.tech/tags/amazon-s3.md>), [artificial-intelligence](<https://devfeed.tech/tags/artificial-intelligence.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [aws](<https://devfeed.tech/tags/aws.md>), [prompt-injection](<https://devfeed.tech/tags/prompt-injection.md>), [security-blog](<https://devfeed.tech/tags/security-blog.md>), [security-identity-compliance](<https://devfeed.tech/tags/security-identity-compliance.md>), [technical-how-to](<https://devfeed.tech/tags/technical-how-to.md>)

### AI overview

This article explains how to propagate user authorization context through AI agents built with Amazon Bedrock AgentCore. It presents a pattern for enforcing least-privilege access in downstream data services and infrastructure, so agents can access DynamoDB, Bedrock Knowledge Bases, S3-backed documents, and other sources only within the requesting user's permissions.

### Source excerpt

Many teams now deploy AI agents that pull from Amazon DynamoDB tables, document repositories, software as a service (SaaS) platforms, and internal knowledge bases to answer questions and automate workflows. A key risk in these deployments is that the agent has no awareness of who's asking, so it might return data the user shouldn't see. [...]