Implementation
AWS: copied permissions go stale in enterprise RAG, so Amazon Quick now re-checks them with the source at query time
AWS says the common replicate-and-filter design for RAG permissions can serve answers from documents a user has lost access to, and describes a two-stage check in Amazon Quick and Bedrock Knowledge Bases that confirms access with SharePoint, Google Drive or Confluence on each query.