AWS amazonq documentation change
Summary
Added support for deleting attachments by introducing the qbusiness:DeleteAttachment IAM permission requirement. Updated policy example to include new permission.
Security assessment
Change introduces a new feature (attachment deletion capability) but does not address security vulnerabilities or describe security features. Focus is on functional permissions rather than security controls.
Diff
diff --git a/amazonq/latest/qbusiness-ug/web-experience-iam-role-iam.md index 506f833eb..245e6f2d5 100644 --- a/amazonq/latest/qbusiness-ug/web-experience-iam-role-iam.md +++ b/amazonq/latest/qbusiness-ug/web-experience-iam-role-iam.md @@ -21,0 +22 @@ Change | Description | Date +Amazon Q Business now supports deleting attachments | To enable delete attachments support on chats, modify your _Web experience IAM role_ by adding the permission `qbusiness:DeleteAttachment`. The scoping for this new permission should be similar to other `qbusiness:` conversation permissions. With this change, users can remove attached files in conversations. | 2/27/2025 @@ -58 +59,2 @@ To allow an Amazon Q Business web experience to invoke the API operations requir - "qbusiness:GetMedia" + "qbusiness:GetMedia", + "qbusiness:DeleteAttachment"