Is it possible to make AWS Bedrock's knowledge bases completely private?
0
designed it with the following architecture.
I created only one Subnet in VPC. I connected Lambda to that Subnet and set the Endpoints of Bedrock, Opensearch Serverless, and S3. I set S3 as an Interface type Endpoint. When I looked at it with Cloud Trail, it seems that Bedrock accesses S3 as a public access. I blocked all public access to S3.
Is there a good alternative? Is it impossible, but they are trying?
1 Answer
- Newest
- Most votes
- Most comments
1
Hello.
Unfortunately, as of November 2024, there is no setting for S3 data sources to go through VPC from the Bedrock Knowledge Base, so there is no way to use VPC endpoints to access S3.
https://docs.aws.amazon.com/bedrock/latest/userguide/s3-data-source-connector.html
Relevant content
- asked 9 months ago
- asked 2 months ago
AWS OFFICIALUpdated 2 months ago- How do I troubleshoot permission errors that I get when I create a knowledge base in Amazon Bedrock?AWS OFFICIALUpdated 21 days ago
- AWS OFFICIALUpdated 8 months ago
Thanks for the reply. So, is the communication between S3 and Bedrock public communication like the internet? Or is it AWS's backbone network communication?
Since the communication is between AWS services, I think the communication is over the AWS backbone network. https://aws.amazon.com/vpc/faqs/?nc1=h_ls
100% correct.