Preconfigured Ubuntu AMI for private document Q&A in your AWS account. Upload, index, and query documents via a protected dashboard using Amazon Bedrock Knowledge Bases and S3 Vectors.
Secure AI Knowledge Workbench - Private Document Intelligence for Your AWS Account
Secure AI Knowledge Workbench is a turnkey, self-hosted document intelligence workspace that deploys entirely within your AWS environment. Launch a single Ubuntu EC2 instance, attach a customer-created IAM role, complete guided first-run setup, and start asking grounded questions from your own documents through a protected browser dashboard.
How It Works
Step 1 - Deploy: Launch the AMI from AWS Marketplace onto a single EC2 instance in your account.
Step 2 - Configure: Attach an IAM role you create and control. The guided first-run setup automatically provisions your private Amazon S3 document bucket, Amazon S3 Vectors bucket and index, Amazon Bedrock Knowledge Base, data source, and required service role - all owned by you.
Step 3 - Upload and Index: Sign in to the protected Workbench dashboard, select a document, click Upload and index, and wait for indexing to complete.
Step 4 - Ask Questions: Query your indexed content and receive grounded answers generated through Amazon Bedrock Knowledge Bases retrieval. When information is not available in the uploaded content, the system clearly indicates it could not find the answer in the documents.
Key Capabilities
Browser-based document workflow - Upload, index, and query documents from a single protected dashboard without switching between AWS console services
Customer-owned AWS resources - Every resource the Workbench provisions lives in your AWS account. You retain full ownership, control, and visibility over your data and infrastructure
Grounded retrieval answers - Responses are generated exclusively from your indexed documents using Amazon Bedrock Knowledge Bases, reducing hallucination risk
Guided onboarding - A one-time setup code, customer-created EC2 IAM role, and protected admin sign-in get you running without manually installing Docker, configuring containers, or storing long-term AWS access keys on the server
Automated resource provisioning - First-run setup handles creation of S3 buckets, S3 Vectors index, Bedrock Knowledge Base, data source, and IAM service roles so you do not build the foundation from scratch
IAM-based security model - Access is controlled through your own IAM role with no long-term AWS credentials stored on the server
AWS Integration Points
Amazon S3 - Private document storage bucket provisioned in your account
Amazon S3 Vectors - Vector bucket and index for document embeddings
AWS IAM - Role-based access control with no long-term access keys
Who It Is For
Teams that need a private document Q&A workspace in AWS without building a custom ingestion pipeline, retrieval layer, dashboard, or reverse proxy. Ideal for organizations that want to keep sensitive documents within their own AWS account while leveraging AI-powered retrieval.
Subscribe through AWS Marketplace, launch the AMI, and follow the guided first-run setup to begin querying your documents. To request a guided walkthrough or ask questions before deploying, reach out through the support contact listed on this page.
Highlights
Protected browser dashboard eliminates the need to build a custom ingestion pipeline, retrieval layer, or reverse proxy. Upload documents, monitor indexing progress, and ask grounded questions from a single secure interface - no separate tooling or custom front-end development required.
All data stays in your AWS account. Amazon S3, S3 Vectors, and Amazon Bedrock Knowledge Base resources are provisioned under your ownership, giving you full control over data residency, access policies, cost visibility, and auditability without sharing data with third-party SaaS platforms.
Guided first-run setup uses your EC2 IAM role for temporary credentials with no long-term AWS access keys stored on the server. This reduces the risk of credential leakage and aligns with AWS security best practices for instance-based authentication.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
You pay by the hour based on the EC2 instance size you choose to run this pre-built workbench. Each dimension maps to a specific instance type, so pricing scales with the compute and memory you select. The t3 and t3a options cover general-purpose sizes from t3.small up through t3a.2xlarge. The m6i options add general-purpose capacity at large and xlarge sizes. The r6i options provide memory-optimized capacity from large up to 4xlarge. Larger instances carry higher hourly rates. You are billed only for the hours each instance runs, with no upfront commitment.
Top-of-mind questions for buyers
What do I actually get when I pay for one instance-hour?
You get one running EC2 instance of the size you chose, hosting this pre-built workbench. One hour of the instance running equals one billed hour. The instance type sets your compute and memory. General-purpose types (t3, t3a, m6i) suit balanced work; memory-optimized types (r6i) hold more RAM per size.
Am I charged when the instance is stopped or paused?
Software charges meter running hours only. When you stop the instance, hourly software charges stop accruing. Stopped instances may still incur underlying AWS storage fees for attached volumes, but those are separate from the per-hour software rate shown in the table.
How do I move to a bigger instance if my workload grows?
You choose a larger instance type from the table and run the workbench on it. Each dimension bills independently at its own hourly rate. Switching sizes changes which hourly rate applies going forward. There is no upfront commitment, so you can change sizes as your needs change.
www.codecreator.com
Helpful?
Vendor refund policy
No contracts. We do not currently support refunds, but you can cancel at any time.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Updated AMI release with a guided first-run setup, protected browser dashboard, and customer-owned AWS resource provisioning. Upload documents, track indexing progress, and ask grounded questions through the Secure AI Knowledge Workbench.
For support inquiries related to the Secure AI Knowledge Workbench, contact Code Creator by email at info@codecreator.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
LeadPilot is an AI-assisted sales and follow-up command center for business owners, salespeople, and small teams. Capture and organize leads, generate responses with Amazon Bedrock or OpenAI, manage follow-up sequences, track opportunities, and monitor sales activity from one self-hosted workspace in your AWS account. Human approval controls and configurable SMTP delivery help keep customer communication under your control.
Secure Code Warrior is the AI Software Governance platform that enables organizations to adopt AI-driven software development securely. Gain visibility into AI-generated code, detect shadow AI across development workflows, and correlate risk at the commit level. Strengthen developer capability and reduce vulnerabilities before production with hands-on secure coding and AI security learning.
Deploy a private AI competitor research server on AWS. Schedule recurring web scans, detect meaningful changes, and export executive reports - all powered by Amazon Bedrock inside your own account.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.