This repository has been archived on 2026-08-04. You can view files and clone it, but cannot push or open issues or pull requests.

Adam Moussa 5175d39eb9 fix(kb): lock AOSS network policy to private with Bedrock source service (#49) ... The @cdklabs/generative-ai-cdk-constructs VectorKnowledgeBase hardcodes AllowFromPublic: true on the auto-created AOSS network policy and exposes no prop to change it. Override the underlying CfnSecurityPolicy to set the collection rule to AllowFromPublic: false with SourceServices: ['bedrock.amazonaws.com'] — the latter is required to keep Bedrock-managed retrieval working once public access is removed (a SourceVPCEs-only policy returns 401 for Bedrock retrieve). Dashboard rule kept public for console access; AWS services cannot reach Dashboards. Same end state was applied live via update-security-policy and smoke-tested (retrieve returns hits, top score ~0.40) so this deploy is a no-op convergence. INFRA-92		2026-06-08 18:01:08 -04:00
..
constructs	fix(kb): lock AOSS network policy to private with Bedrock source service (#49)	2026-06-08 18:01:08 -04:00
seahaven-slack-bot-stack.ts	feat: Alex rollout — persona, Socket Mode, payments, channels, App Home, unanswered questions	2026-04-30 16:38:54 -04:00