AWS amazonq documentation change
Summary
Updated documentation to streamline prerequisites, removed private S3 bucket configuration details and example policy, added real-time preview note, and clarified supported content types.
Security assessment
Changes focus on documentation restructuring and feature clarification rather than addressing security vulnerabilities. Removal of private bucket policy example appears to be content simplification rather than security remediation. Security-related prerequisites about public access and CORS remain present.
Diff
diff --git a/amazonq/latest/qbusiness-ug/customizing-web-experience-themes.md b/amazonq/latest/qbusiness-ug/customizing-web-experience-themes.md index 86de1df62..9779431d7 100644 --- a/amazonq/latest/qbusiness-ug/customizing-web-experience-themes.md +++ b/amazonq/latest/qbusiness-ug/customizing-web-experience-themes.md @@ -9 +9 @@ PrerequisitesConsoleCLI -This topic shows how to customize the visual theme using the Amazon Q Business console and the AWS CLI. +This topic shows how to customize the visual theme using the AWS Management Console and the AWS CLI. @@ -13 +13 @@ This topic shows how to customize the visual theme using the Amazon Q Business c - * The console only supports accessing customization artifacts stored in Amazon S3 but the Amazon Q Business API supports accessing artifacts in both S3 and other data sources. + * When using the console, you can preview changes in real-time as you customize your web experience. @@ -15,5 +15 @@ This topic shows how to customize the visual theme using the Amazon Q Business c - * Your web customization artifacts must be of one of the following supported content types. - - * Custom logo and favicons — `image/svg+xml`, `image/x-icon`, and `image/png`. - - * Custom fonts — `font/ttf`, `font/otf`, `font/woff`, and `font/woff2`. + * The console only supports S3 resources but API supports both S3 and non-S3 resources. @@ -26 +22 @@ This topic shows how to customize the visual theme using the Amazon Q Business c - * Prerequisites for accessing your customization artifacts stored in Amazon S3 + * Prerequisites @@ -35,7 +31 @@ This topic shows how to customize the visual theme using the Amazon Q Business c -## Prerequisites for accessing your customization artifacts stored in Amazon S3 - - 1. All S3 URIs for files to read and folders to store must be located in the same AWS Region as the application environment of the web experience. - - 2. You can use public or private Amazon S3 buckets to save and store your web experience customization. - - * ###### Prerequisites for public S3 buckets +## Prerequisites @@ -43 +33 @@ This topic shows how to customize the visual theme using the Amazon Q Business c - * Ensure all S3 URIs for files to read and folders to store are publicly accessible. For managing access to your S3 files, see [Access Control in Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-management.html). + 1. Ensure all S3 URIs for files to read and folders to store are publicly accessible. For managing access to your S3 files, see [Access Control in Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-management.html). @@ -45 +35 @@ This topic shows how to customize the visual theme using the Amazon Q Business c - * Configure CORS to allow console and web app access to resources. For more information, see [Configuring cross-origin resource sharing (CORS)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/enabling-cors-examples.html). + 2. All S3 URIs for files to read and folders to store must be located in the same AWS Region as the application environment that you will customize. @@ -47 +37 @@ This topic shows how to customize the visual theme using the Amazon Q Business c - * **Prerequisites for private S3 buckets** + 3. Configure CORS to allow console and web app access to resources. For more information, see [Configuring cross-origin resource sharing (CORS)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/enabling-cors-examples.html). @@ -49 +39 @@ This topic shows how to customize the visual theme using the Amazon Q Business c -To allow Amazon Q Business to access web customization artifacts from your private S3 buckets, you must do the following: + 4. Ensure that your artifacts are of one of the following supported content types. @@ -51,5 +41 @@ To allow Amazon Q Business to access web customization artifacts from your priva - * Disable [access control lists (ACLs)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html). For more information, see [Setting Object Ownership on an existing bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-ownership-existing-bucket.html). - - * Create a bucket policy in your private bucket. - -###### Example policy for giving Amazon Q Business access to your web experience artifacts + * Custom logo and favicons — `image/svg+xml`, `image/x-icon`, and `image/png`. @@ -57,29 +43 @@ To allow Amazon Q Business to access web customization artifacts from your priva - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "PolicyForAmazonQWebAccessForWebExperienceArtifacts", - "Effect": "Allow", - "Principal": { - "Service": "application.qbusiness.amazonaws.com" - }, - "Action": [ - "s3:GetObject" - ], - "Resource": [ - "your-web-experinece-s3-object-arn", - "your-web-experinece-s3-object-arn" - ], - "Condition":{ - "StringLike":{ - "aws:Referer":[ - "your-webexperience-domain-without-https://" - ] - }, - "Bool": { - "aws:SecureTransport": "true" - } - } - } - ] - } + * Custom fonts — `font/ttf`, `font/otf`, `font/woff`, and `font/woff2`. @@ -118,0 +77,4 @@ The following procedure shows how to customize visual themes using the console. +###### Note + +After saving your customizations, allow up to 10 minutes for the changes to appear in the live web experience. +