🛡️ AWS Bedrock Knowledge Base should use an Active embedding model🟢

• Contextual name: 🛡️ Knowledge Base should use an Active embedding model🟢
• ID: /ce/ca/aws/bedrock/knowledge-base-model-support
• Tags:
  • 🟢 Policy with categories
  • 🟢 Policy with type
  • 🟢 Production policy
• Policy Type: BEST_PRACTICE
• Policy Categories: RELIABILITY

Stats

not available

Logic

• 🧠 prod.logic.yaml🟢
  • 📗 AWS Bedrock Knowledge Base
  • 🔌 AWS Bedrock Foundation Model - object.extracts.yaml
  • 🔌 AWS Bedrock Knowledge Base - object.extracts.yaml
  • 🧪 test-data.json

Description

Open File

Description

Identify Amazon Bedrock knowledge bases configured to use a foundation embedding model in the LEGACY lifecycle state. This is a preventive retirement check of the model used to create vector embeddings, rather than an assessment of every model listed in the regional catalog or the model used to generate answers.

Rationale

Migrating embedding workloads before model retirement protects document ingestion and retrieval. A Legacy model may remain usable, but AWS recommends moving to an Active model before its end-of-life date. Lifecycle states and dates can differ by AWS Region; the configured model's regional record is the relevant source.

Impact

Changing embedding models can require a new knowledge base, compatible vector storage, and re-embedding and re-indexing the source documents. Migration can incur ingestion costs and affect retrieval quality, dimensions, data types, and application integrations. Validate the replacement before switching traffic.

Audit

This policy marks an AWS Bedrock Knowledge Base as INCOMPLIANT if its configured Foundation Embedding Model ARN resolves to a present AWS Bedrock Foundation Model whose Model Lifecycle: Status is LEGACY. It is COMPLIANT when that status is ACTIVE. The related Model ARN must exactly match the configured ARN, including its AWS Region. Legacy means deprecated and scheduled for retirement; it does not mean that the model is already unavailable or that paid extended access applies.

... see more

Remediation

Open File

Remediation

Migrate the knowledge base to an Active embedding model before the current model's announced retirement date. Keep the existing knowledge base and vector index available until the replacement has been tested and applications have switched to it.

If the finding is UNDETERMINED, resolve missing model data or any ARN or Region mismatch before making changes. An Active model elsewhere in the catalog does not establish support for the model configured on this knowledge base.

1. Confirm the configured embedding model

Find the affected knowledge base's ID and AWS Region in the Amazon Bedrock console. Replace KNOWLEDGE_BASE_ID and REGION in this command:

aws bedrock-agent get-knowledge-base --knowledge-base-id KNOWLEDGE_BASE_ID --region REGION

Review the embedding model ARN, vector store, embedding dimensions, and vector data type. Identify the data sources, agents, and applications that depend on this knowledge base.

Confirm the configured model's lifecycle status in the same Region and review its announced end-of-life date in Amazon Bedrock. Changing the generation model used by RetrieveAndGenerate does not replace the embedding model used to index and retrieve documents.

... see more

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 Cloudaware Framework → 💼 Infrastructure Modernization			39		no data