AWS amazonq documentation change
Summary
Removed section 'Data perimeters for Amazon Q resources' containing S3 bucket ARNs/URLs for feature artifacts
Security assessment
Removal of data perimeter documentation appears to be content reorganization rather than addressing a security issue. No evidence of vulnerability remediation.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.md index 82c1d2576..b1979abcb 100644 --- a/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.md +++ b/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.md @@ -5 +5 @@ -Policy best practicesAssign permissionsManage access with SCPsData perimeters for Amazon Q resources +Policy best practicesAssign permissionsManage access with SCPs @@ -28 +30 @@ For a list of all Amazon Q permissions you can control with policies, see the se - * Data perimeters for Amazon Q resources + @@ -100,49 +102,0 @@ Denying access to Amazon Q will not disable the Amazon Q icon or chat panel in t -## Data perimeters for Amazon Q resources - -For some features, Amazon Q uploads artifacts to AWS service-owned Amazon S3 buckets. If you are using data perimeters to control access to Amazon S3 in your environment, you might need to explicitly allow access to these buckets to use the corresponding Amazon Q features. - -The following table lists the ARN and URL of each of the Amazon S3 buckets that Amazon Q requires access to, and the features that use each bucket. You can use the bucket ARN or bucket URL to allowlist these buckets, depending on how you control access to Amazon S3. - -Amazon S3 bucket ARN | Amazon S3 bucket URL | Description ----|---|--- - - - arn:aws:s3:::amazonq-code-scan-us-east-1-29121b44f7b - -| - - - https://amazonq-code-scan-us-east-1-29121b44f7b.s3.amazonaws.com/ - -| An Amazon S3 bucket used to upload artifacts for [Amazon Q code reviews](./code-reviews.html) - - - arn:aws:s3:::amazonq-code-transformation-us-east-1-c6160f047e0 - -| - - - https://amazonq-code-transformation-us-east-1-c6160f047e0.s3.amazonaws.com/ - -| An Amazon S3 bucket used to upload artifacts for the [Amazon Q Developer Agent for code transformation](./code-transformation.html) - - - arn:aws:s3:::amazonq-feature-development-us-east-1-a5b980054c6 - -| - - - https://amazonq-feature-development-us-east-1-a5b980054c6.s3.amazonaws.com/ - -| An Amazon S3 bucket used to upload artifacts for the [Amazon Q Developer Agent for software development](./software-dev.html) - - - arn:aws:s3:::amazonq-test-generation-us-east-1-74b667808f2 - -| - - - https://amazonq-test-generation-us-east-1-74b667808f2.s3.us-east-1.amazonaws.com/ - -| An Amazon S3 bucket used to upload artifacts for the [Amazon Q Developer Agent for unit test generation](./test-generation.html) -