Amazon Web Services has expanded Amazon Bedrock by introducing an external web access control parameter for its integrated Web Search tool. The capability enables foundation models hosted on the cloud platform to fetch real-time information directly from the public internet, bridging the gap between static model training cutoffs and live digital data.
Expanding Web Search Beyond the Cloud Perimeter
Earlier this month, AWS unveiled Web Search for Amazon Bedrock as a server-side grounding utility designed to enhance model accuracy without risking data egress. In its initial release, the capability strictly referenced Amazon proprietary in-AWS web index and structured knowledge graph to guarantee that user queries and retrieved records remained within the cloud perimeter.
The introduction of the external_web_access parameter provides developers and enterprises with granular control over how models retrieve supplementary context. When activated, Amazon Bedrock executes live queries against the public web to ingest up-to-the-minute data. The feature is targeted at dynamic workloads requiring immediate freshness, such as tracking live financial pricing, checking athletic scores, and referencing newly updated technical documentation.
Configuring Security Boundaries and Permissions
To implement live retrieval, administrators must assign the bedrock-websearch:ExternalWebAccess Identity and Access Management (IAM) permission to the requesting identity. By default, the configuration sets the external_web_access parameter to true, enabling direct internet retrieval once the IAM permission is attached.
For organizations operating under strict compliance frameworks or handling sensitive enterprise records, AWS provides a toggle to enforce zero-egress policies. By configuring external_web_access: false, developers instruct the service to bypass the live internet entirely and fall back onto the internal in-AWS index and knowledge graph.
- Parameter Configuration: The external_web_access parameter defaults to true when IAM permissions are granted.
- IAM Requirement: Explicit assignment of bedrock-websearch:ExternalWebAccess is necessary for live internet querying.
- Zero Data Egress Mode: Setting the parameter to false confines retrieval to the isolated in-AWS index and knowledge graph.
- Target Workloads: Live retrieval supports fast-moving data such as market prices, documentation updates, and breaking statistics.
Regional Availability and Deployment
The external web access feature for Amazon Bedrock Web Search is currently available across three cloud regions in the United States:
- US East (N. Virginia)
- US East (Ohio)
- US West (Oregon)
By offering an integrated toggle between isolated cloud indexes and open internet queries, AWS aims to simplify retrieval-augmented generation pipelines, eliminating the architectural complexity of building and maintaining custom web scrapers or third-party search integrations.
Source: Original Article
