CreateAccessControlConfiguration

Source: src/AWS/Kendra/CreateAccessControlConfiguration.ts

Runtime binding for the CreateAccessControlConfiguration operation (IAM action kendra:CreateAccessControlConfiguration), scoped to one Index.

Creates a named access-control configuration (user/group ACLs) on the index. Kendra designed this for runtime use: re-apply access changes to documents at query time without re-indexing them — e.g. revoke a departed user’s access, then reference the returned Id from a document’s AccessControlConfigurationId. Provide the implementation with Effect.provide(AWS.Kendra.CreateAccessControlConfigurationHttp).

Access Control Configurations

const createAcl =
  yield* AWS.Kendra.CreateAccessControlConfiguration(index);

const { Id } = yield* createAcl({
  Name: "block-departed-users",
  AccessControlList: [
    { Name: "departed-user", Type: "USER", Access: "DENY" },
  ],
});