ingested_document_acls

Creates, updates, deletes, gets or lists an ingested_document_acls resource.

Overview

Name	ingested_document_acls
Type	Resource
Id	aws.bedrock_agent_runtime.ingested_document_acls

Fields

The following fields are returned by SELECT queries:

get_ingested_document_acl

Name	Datatype	Description
allow_list	object	The list of principals allowed access to the document.
deny_list	object	The list of principals denied access to the document.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_ingested_document_acl	select	data_source_id, knowledge_base_id, region		Retrieves the ingested access control list (ACL) for a specific document in a knowledge base. Use this operation to inspect the allow and deny lists that were ingested for a document to troubleshoot access control issues. To use this operation, you must have the bedrock:GetIngestedDocumentAcl permission.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
data_source_id	string	The unique identifier of the data source that contains the document.
knowledge_base_id	string	The unique identifier of the knowledge base that contains the document.
region	string	AWS region (default: us-east-1)

SELECT examples

get_ingested_document_acl

Retrieves the ingested access control list (ACL) for a specific document in a knowledge base. Use this operation to inspect the allow and deny lists that were ingested for a document to troubleshoot access control issues. To use this operation, you must have the bedrock:GetIngestedDocumentAcl permission.

SELECT
allow_list,
deny_list
FROM aws.bedrock_agent_runtime.ingested_document_acls
WHERE data_source_id = '{{ data_source_id }}' -- required
AND knowledge_base_id = '{{ knowledge_base_id }}' -- required
AND region = '{{ region }}' -- required
;