Combine Amazon Bedrock Data Bases with Microsoft SharePoint as an information supply

Amazon Bedrock Data Bases gives basis fashions (FMs) and brokers in Amazon Bedrock contextual info out of your firm’s non-public information sources for Retrieval Augmented Era (RAG) to ship extra related, correct, and customised responses. Amazon Bedrock Data Bases provides a completely managed RAG expertise.

The info sources that may be linked to as data bases are repeatedly increasing. This put up showcases how you can use one of many information supply connectors; Microsoft SharePoint, an built-in content material administration and collaboration instrument that many organizations use for storing, organizing, and sharing their inner information. See Information supply connectors for the complete listing of supported information supply connectors.

Answer overview

The next are some pertinent options of the SharePoint information supply inside Amazon Bedrock Data Bases:

• It gives entry to the knowledge saved in SharePoint. The RAG structure queries and retrieves related info from the SharePoint supply to supply contextual responses primarily based on the consumer’s enter.
• It gives the power to extract structured information, metadata, and different info from paperwork ingested from SharePoint to supply related search outcomes primarily based on the consumer question.
• It gives the power to sync incremental SharePoint content material updates on an ongoing foundation.
• It gives supply attribution to the response generated by the FM.

Within the following sections, we stroll by the steps to create a data base, configure your information supply, and take a look at the answer.

Conditions

The next are the conditions essential to implement Amazon Bedrock Data Bases with SharePoint as a connector:

Create a data base and connect with the info supply

Full the next steps to arrange a data base on Amazon Bedrock and connect with a SharePoint information supply:

1. On the Amazon Bedrock console, select Data bases within the navigation pane.
2. Select Create data base.

3. Within the Data base particulars part, optionally change the default identify and enter an outline on your data base.
4. Within the IAM permissions part, choose an IAM position that gives Amazon Bedrock permission to entry different AWS providers. You’ll be able to let Amazon Bedrock create the service position or select a customized position that you’ve created.
5. Within the Select information supply part, choose SharePoint.
6. Optionally, add tags to your data base. For extra info, see Tag sources.
7. Select Subsequent.

8. Within the Identify and Description part, optionally change the default information supply identify and enter an outline of the info supply.
9. Within the Supply part, present the next info:
   1. For Website URLs, enter the location URLs to make use of for crawling and indexing the content material for RAG.
   2. For Area, enter the area identify related to the info supply. For instance, if the location URL is https://deloittedasits.sharepoint.com/xyz.aspx, the area worth could be deloittedasits.
   3. Below Superior settings, hold the default choices.

Whereas changing your information into embeddings, Amazon Bedrock encrypts your information with a key that AWS owns and manages by default. To make use of your personal AWS Key Administration Service (AWS KMS) key, select Customise encryption settings (Superior) and select a key. For extra info, see Encryption of transient information storage throughout information ingestion.

You too can select from the next choices for the info deletion coverage on your information supply:

• Delete – Deletes all underlying information belonging to the info supply from the vector retailer upon deletion of a data base or information supply useful resource. Notice that the vector retailer itself is just not deleted, solely the underlying information. This flag is ignored if an AWS account is deleted.
• Retain – Retains all underlying information in your vector retailer upon deletion of a data base or information supply useful resource.

For extra info on managing your data base, see Handle an information supply.

10. Within the Authentication part, the supported authentication technique is ready to OAuth 2.0.
    1. For Tenant ID, enter your tenant ID. Consult with part Register a brand new utility within the Microsoft Azure Portal of this put up to get the Tenant ID.
    2. For AWS Secrets and techniques Supervisor secret, enter an AWS Secrets and techniques Supervisor Consult with the part Create a Secrets and techniques Supervisor secret for the SharePoint information supply of this put up to get the key.

The SharePoint information supply will want credentials to connect with the SharePoint On-line website utilizing the Microsoft Graph API. To facilitate this, create a brand new Secrets and techniques Supervisor secret. These credentials is not going to be utilized in any entry logs for the SharePoint On-line Website.

11. Within the Metadata Settings part, optionally choose any content material varieties that you just need to embrace or exclude.

12. Within the Content material chunking and parsing part, choose Default.

13. Select Subsequent.
14. Within the Embeddings mannequin part, choose Titan Embeddings G1 – Textual content or one other embeddings mannequin as applicable.
15. Within the Vector database part, choose Fast create a brand new vector retailer to create a vector retailer for the embeddings.
16. Select Subsequent.

17. On the Evaluation and create web page, confirm the choices you made and select Create.

The data base creation must be full.

The data base with SharePoint as the info supply is now created. Nevertheless, the info supply must be synced in an effort to crawl the location URLs and index the related content material.

18. To provoke this course of, on the data base particulars web page, choose your information supply and select Sync.

Register a brand new utility within the Microsoft Azure Portal

On this part, we register a brand new utility within the Microsoft Azure Portal. We seize the Tenant ID from this step to make use of when configuring the info supply for Data Base for Amazon Bedrock. Full the next steps:

1. Open the Azure Portal and log in along with your Microsoft account. In case you don’t have an account, you’ll be able to create one or contact your group’s administration group.
2. Select New registration.
3. Present the next info:
   1. For Identify, present the identify on your utility. Let’s check with this utility as TargetApp. Amazon Bedrock Data Bases makes use of TargetApp to connect with the SharePoint website to crawl and index the info.
   2. For Who can use this utility or entry this API, select Accounts on this organizational listing solely ( solely – Single tenant).
   3. Select Register.
   4. Notice down the appliance (consumer) ID and the listing (tenant) ID on the Overview You’ll want them later when requested for TargetApp-ClientId and TenantId.
4. Select API permissions within the navigation pane.
5. Configure the permissions as follows:
   1. Select Add a permission.
   2. Select Microsoft Graph.
   3. Select Delegated permissions.
   4. Select Learn.All within the Consumer part.
   5. Select Learn.All within the GroupMember part.
   6. Select FullControl.All within the Websites part.
   7. Select Add permissions. This permission permits the app to learn information in your group’s listing concerning the signed-in consumer.
   8. On the choices menu (three dots), select Take away permission.
   9. Take away the unique Learn – Delegated permission.
   10. Select Grant admin consent for the default listing.

6. Select Certificates & secrets and techniques within the navigation pane.
   1. Select New consumer secret.
   2. For Description, enter an outline, equivalent to description of my consumer secret.
   3. Select a worth for Expires. In manufacturing, you’ll must manually rotate your secret earlier than it expires.
   4. Select Add.
   5. Notice down the worth on your new secret. You’ll want it later when requested on your consumer secret (TargetApp-ClientSecret).
7. Optionally, select Homeowners so as to add any extra homeowners for the appliance. Homeowners will have the ability to handle permissions of the Azure AD app (TargetApp).

Create a Secrets and techniques Supervisor secret for the SharePoint information supply

Full the next steps to create a Secrets and techniques Supervisor secret to connect with the SharePoint on-line websites listed as website URLs throughout the information supply:

1. On the Secrets and techniques Supervisor console, select Retailer a brand new secret.
2. For Secret kind, choose Different kind of secret.
3. For Key/worth pairs, enter the next:
   1. username
   2. password
   3. clientId
   4. clientSecret
4. For Encryption key, select aws/secretsmanager.
5. Select Subsequent.
6. Within the Secret identify and outline part, enter the identify of the key and an non-compulsory description.
7. Add any related tags within the Tags
8. Go away Useful resource permissions and Replication secret as default.
9. Select Subsequent.
10. Within the Configure rotation part, go away as default or modify based on your organizational insurance policies.
11. Select Subsequent.
12. Evaluation the choices you chose and select Retailer.
13. On the secrets and techniques element web page, observe your secret ARN worth for use as the key when creating the Data Base for Amazon Bedrock.

Take a look at the answer

Full the next steps to check the data base you created:

1. On the Amazon Bedrock console, select Data bases within the navigation pane.
2. Choose the data base you created and select Take a look at.

3. Select an applicable mannequin for testing and select Apply.

4. Enter your query for the content material housed within the SharePoint website.

Clear up

In case you created a brand new data base to experiment utilizing this put up and don’t plan to make use of it additional, delete the data base in order that your AWS account doesn’t accumulate prices. For directions, see Handle a data base.

Conclusion

On this put up, we confirmed you how you can configure Amazon Bedrock Data Bases with SharePoint On-line as an information supply. By connecting SharePoint On-line as an information supply, workers can work together with the group’s data and information saved in SharePoint utilizing pure language, making it easy to search out related info, extract key factors, and derive useful insights. This may considerably enhance productiveness, decision-making, and data sharing throughout the group.

Do this characteristic on the Amazon Bedrock console in the present day! See Amazon Bedrock Data Bases to study extra.

In regards to the Authors

Surendar Gajavelli is a Sr. Options Architect primarily based out of Nashville, Tennessee. He’s a passionate know-how fanatic who enjoys working with prospects and serving to them construct modern options.

Abhi Patlolla is a Sr. Options Architect primarily based out of the New York Metropolis area, serving to prospects of their cloud transformation, AI/ML, and information initiatives. He’s a strategic and technical chief, advising executives and engineers on cloud methods to foster innovation and optimistic affect.