AWS amazonq documentation change
Summary
Added support for deleting attachments by introducing the qbusiness:DeleteAttachment IAM permission requirement. Updated policy example to include new permission.
Security assessment
Identical to the IAM role change - introduces functional permission for attachment deletion without security context. No evidence of security issue remediation or security feature documentation.
Diff
diff --git a/amazonq/latest/qbusiness-ug/web-experience-iam-role-idc.md index cd3a55d11..62da74d65 100644 --- a/amazonq/latest/qbusiness-ug/web-experience-iam-role-idc.md +++ b/amazonq/latest/qbusiness-ug/web-experience-iam-role-idc.md @@ -21,0 +22 @@ Change | Description | Date +Amazon Q Business now supports deleting attachments | To enable delete attachments support on chats, modify your _Web experience IAM role_ by adding the permission `qbusiness:DeleteAttachment`. The scoping for this new permission should be similar to other `qbusiness:` conversation permissions. With this change, users can remove attached files in conversations. | 2/27/2025 @@ -55,0 +57 @@ To allow an Amazon Q Business web experience to invoke the API operations requir + "qbusiness:DeleteAttachment",