AmazonKendra- Salesforce Integration

Hello Team ,

I have integrate between Amazon Kendra - Salesforce and am able to search as well acrose my Salesforce data source. But am stuck how can I achieve ACL on my salesforce data so that user can see data on which they have access only. For Example there is user Simran having profile System Administrator and it dont have access on Contact object records this is setup in Salesforce but how can I make sure if Simran search in AMazon Kendra she will not able to Contact object records or she can only records on which she have access while searching in Amazon Kendra. Thanks,