Connect OneDrive 数据源

要创建 OneDrive 数据源，请使用适用于 Amazon Bedrock 的代理构建时终端节点发送CreateDataSource请求。以下 AWS Command Line Interface 示例创建了一个使用 Microsoft Entra 应用程序 ID 身份验证的数据源。要启用文档级访问控制，请将设置为true并添加aclEnabled到。certificateS3Path connectionConfiguration有关每个字段的描述，请参阅下面的连接器参数参考。

aws bedrock-agent create-data-source \
 --name "OneDrive-connector" \
 --knowledge-base-id "your-knowledge-base-id" \
 --data-source-configuration file://onedrive-managed-connector.json

该onedrive-managed-connector.json文件包含以下内容：

{
    "type": "MANAGED_KNOWLEDGE_BASE_CONNECTOR",
    "managedKnowledgeBaseConnectorConfiguration": {
        "connectorParameters": {
            "type": "ONEDRIVE",
            "version": "1",
            "aclEnabled": false,
            "connectionConfiguration": {
                "secretArn": "arn:aws:secretsmanager:us-west-2:123456789012:secret:bedrock-onedrive-creds",
                "tenantId": "12345678-1234-1234-1234-123456789012",
                "authType": "ENTRA_APP_ID"
            },
            "dataEntityConfiguration": {
                "crawlPersonalDrives": true
            }
        }
    }
}

要启用文档级访问控制，aclEnabled请设置为true并添加certificateS3Path到：connectionConfiguration

{
    "type": "ONEDRIVE",
    "version": "1",
    "aclEnabled": true,
    "connectionConfiguration": {
        "secretArn": "arn:aws:secretsmanager:us-west-2:123456789012:secret:bedrock-onedrive-creds",
        "tenantId": "12345678-1234-1234-1234-123456789012",
        "authType": "ENTRA_APP_ID",
        "certificateS3Path": {
            "s3BucketName": "your-certificate-bucket",
            "s3KeyName": "certs/certificate.p12"
        }
    },
    "dataEntityConfiguration": {
        "crawlPersonalDrives": true
    }
}

对于OAUTH2数据源，设置authType为OAUTH2和省略certificateS3Path。

对于托管知识库，CreateDataSource这是异步的：操作完成后，数据源状态AVAILABLE会从CREATING变为。