Departments can view different documents.
The model answers only from retrieved evidence.
Choose two designs.
Apply user permissions before retrieval and test authorization across search, cache, citations, logs, and output to prevent re-exposure.
Detailed explanation
Only authorized data reaches the model.
Only authorized data reaches the model.
Later stages cannot re-expose data.
Later stages cannot re-expose data.
It may already reach the model or logs.
It may already reach the model or logs.
Similarity does not override access.
Similarity does not override access.
Try it yourself
An example you can run in a temporary verification environment.
AWS公式AIF-C01 Domain 3.2の検索認可とデータ保護を確認する。Expected result
モデルへ渡す前に利用者の文書権限を適用できる。Key points
- ACL
- Pre-filter
- Cache
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.