AWS amazonq documentation change
Summary
Restructured ISV documentation, removing detailed security recommendations and consolidating content
Security assessment
Content reorganization removes some security best practices documentation but provides links instead
Diff
diff --git a/amazonq/latest/qbusiness-ug/isv.md b/amazonq/latest/qbusiness-ug/isv.md index 525ce9315..bd303ba78 100644 --- a/amazonq/latest/qbusiness-ug/isv.md +++ b/amazonq/latest/qbusiness-ug/isv.md @@ -5 +5 @@ -Key conceptsCreating an Amazon Q index +Key concepts @@ -21,5 +21 @@ Key conceptsCreating an Amazon Q index - * Creating an Amazon Q index on behalf of a customer - - * [Calling the SearchRelevantContent API to an Amazon Q index with an IAM Identity Center application environment](./isv-calling-api-idc.html) - - * [Calling the SearchRelevantContent API on an Amazon Q application environment with IAM Federation](./isv-calling-api-iam.html) + * [Creating an Amazon Q index on behalf of a customer](./isv-creating-index.html) @@ -58,12 +53,0 @@ A resource-based policy is an IAM policy that's attached to a resource. Amazon Q -## Creating an Amazon Q index on behalf of a customer - -We recommend creating one Amazon Q Business application environment per customer for better security and data segregation. Alternatively, you can create one Amazon Q Business application environment and share it with multiple customers. This is only recommended when you index documents that are visible to all users in your application. - -### Determine the identity management for your customer's Amazon Q Business application - -All Amazon Q Business application environments require user access through AWS Identity and Access Management (IAM) identity management. You can choose one of two types of user IAM identity management methods supported by Amazon Q Business. These are IAM Identity Center and IAM Federation. Both IAM Identity Center and IAM Federation require an external identity provider setup to allow end users to log in through their identity provider. - -IAM Identity Center provides advanced user group management, while Identity and Access Management (IAM) Federation provides more service quotas for the external identity providers. You can choose the identity management that's best suited for you and your end customer when creating their Amazon Q Business application environment. For more information, see [Configuring an Amazon Q Business application environment using AWS IAM Identity Center](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/create-application.html) and [Creating an Amazon Q Business application environment using Identity Federation through IAM](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/create-application-iam.html) - -After the Amazon Q Business application environment is created, set up the retriever and connect the data sources. For a complete list of data source connectors,see [supported connectors](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connectors-list.html). You will need your customers to provide the relevant credentials for each connector that you intend to retrieve data from. For more information, see [Creating a retriever for an Amazon Q Business application](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/select-retriever.html) and [Connecting Amazon Q Business data sources](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/data-sources.html). -