Controlling user access to documents with tokens
You can control which users or groups can access certain documents in your index or see certain documents in their search results. This is called user context filtering. It is a kind of personalized search with the benefit of controlling access to documents. For example, not all teams that search the company portal for information should access top-secret company documents, nor are these documents relevant to all users. Only specific users or groups of teams given access to top-secret documents should see these documents in their search results.
Amazon Kendra supports token-based user access control using the following token types:
-
Open ID
-
JWT with a shared secret
-
JWT with a public key
-
JSON
Amazon Kendra delivers highly secure enterprise search for your search applications. Your search results reflect the security model of your organization. Customers are responsible for authenticating and authorizing users to gain access to their search application. At search time, the Amazon Kendra service filters search results based on user ID provided by the customer's search application, and document access control lists (ACLs) collected by the Amazon Kendra connectors during crawl/indexing time. The search results return URLs pointing back to the original document repositories plus short excerpts. Access to the full document is still enforced by the original repository.
Topics
