CCAR-P: Claude Certified Architect — Professional

By Anthropic · Question Mode

QuestionQ87

VerifiedGovernance, Safety & Risk Management

You are a platform architect building an internal Claude-based assistant for both finance analysts and external auditors. Each group must be able to access only the documents authorized for its role.

At which point in the pipeline should role-based access control be enforced?

Explanation

Role-based access control belongs at retrieval time, before retrieved documents are added to the prompt or exposed to the model. Enforcing authorization there prevents unauthorized content from entering the model context; prompt-only instructions, general refusal behavior, and post-response filtering do not provide that security boundary. Amazon Bedrock documents ACL-aware retrieval as pre-retrieval filtering that returns only documents the supplied user is permitted to access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!