AWS amazonq documentation change
Summary
Added section about mandatory Amazon Q Developer profiles and expanded profile sharing rationale
Security assessment
Documents mandatory security controls (profiles) and centralized configuration management, but no evidence of addressing a specific vulnerability.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/q-admin-setup-subscribe-understanding.md b/amazonq/latest/qdeveloper-ug/q-admin-setup-subscribe-understanding.md index 9e9e271a1..24ad23a39 100644 --- a/amazonq/latest/qdeveloper-ug/q-admin-setup-subscribe-understanding.md +++ b/amazonq/latest/qdeveloper-ug/q-admin-setup-subscribe-understanding.md @@ -5 +5 @@ -Understanding subscription statusesAcross your organizationUnderstanding subscription visibilityUnderstanding profile sharing +Understanding subscription statusesUnderstanding subscriptions across your organizationUnderstanding subscription visibilityUnderstanding Amazon Q Developer profilesUnderstanding profile sharing @@ -29 +29 @@ For more information about AWS Organizations, including information about manage -This section is only relevant if your business has [AWS Organizations](https://docs.aws.amazon.com/) set up. +This section is only relevant if your business has [AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html) set up. @@ -34,0 +35,13 @@ To have Amazon Q display an aggregated list of subscriptions, see [Viewing an ag +## Understanding Amazon Q Developer profiles + +An _Amazon Q Developer profile_ , also known as a _settings profile_ , is a collection of Amazon Q Developer settings associated with a Amazon Q Developer managed application. When you subscribe users for the very first time in your account, you will be prompted to install this profile. You can also choose to install the profile without subscribing users, for the reason outlined in [Enabling profile sharing in Amazon Q Developer](./q-admin-profile-sharing.html). + +Other characteristics of the Amazon Q Developer profile are: + + * The profile is mandatory; without it, you won't be able to subscribe users. + + * The profile can be installed once per AWS account, in US East (N. Virginia). US East (N. Virginia) is currently the only Region supported by the Amazon Q Developer profile. + + + + @@ -41,3 +54 @@ This section is only relevant if your business has [AWS Organizations](https://d -When profile sharing access is enabled, end users who are subscribed to Amazon Q Developer Pro in a _management_ account will be able to use their Amazon Q Developer Pro subscription to [chat with Amazon Q in the AWS Management Console and other AWS websites](./q-on-aws.html) while signed in to a _member_ account. When this setting is disabled, these users can still chat with Amazon Q in a member account, but they'll be subject to Free tier limits and features. - -To enable profile sharing, see [Enabling profile sharing in Amazon Q Developer](./q-admin-profile-sharing.html). +When the _profile sharing_ feature is enabled, an Amazon Q Developer profile that has been installed in a management account will be shared with member accounts. There are two reasons you might want to this. First, sharing the profile means that all your member accounts will be using the same Amazon Q Developer profile and corresponding settings, ensuring consistency across accounts. Second, sharing the profile allows users to use their subscription when using Amazon Q in the AWS Management Console while signed in to a member account. For more information, see [Enabling profile sharing in Amazon Q Developer](./q-admin-profile-sharing.html).