AWS Security ChangesHomeSearch

AWS amazonq documentation change

Service: amazonq · 2025-04-11 · Documentation low

File: amazonq/latest/qdeveloper-ug/q-admin-setup-unsubscribe.md

Summary

Consolidated unsubscribe procedures across Amazon Q services into a unified process, added detailed steps for account administrators, and removed service-specific unsubscribe sections

Security assessment

The changes clarify access management procedures but do not address a specific security vulnerability. Focuses on proper subscription management which relates to security best practices for access revocation

Diff

diff --git a/amazonq/latest/qdeveloper-ug/q-admin-setup-unsubscribe.md b/amazonq/latest/qdeveloper-ug/q-admin-setup-unsubscribe.md
index 6f7ef47b5..0964ebe21 100644
--- a//amazonq/latest/qdeveloper-ug/q-admin-setup-unsubscribe.md
+++ b//amazonq/latest/qdeveloper-ug/q-admin-setup-unsubscribe.md
@@ -5,2 +4,0 @@
-Unsubscribing from Amazon Q Developer ProUnsubscribing from Amazon Q BusinessUnsubscribing from Amazon QuickSight Q
-
@@ -9,24 +7 @@ Unsubscribing from Amazon Q Developer ProUnsubscribing from Amazon Q BusinessUns
-Review the following topics to understand how to unsubscribe users from various Amazon Q subscriptions.
-
-## Unsubscribing from Amazon Q Developer Pro
-
-If you want to remove all associations for an end user who is not part of a group, the organization administrator should first review all associations mapped to that user. 
-
-To review associations for a user, the organization administrator must:
-
-  1. Sign in to the Amazon Q subscription console
-
-  2. Select the **User** tab and review each association for that end user
-
-
-
-
-After you have reviewed your chosen user's associations, you can remove those associations by unsubscribing the user in the appropriate part of the Amazon Q subscription console. Organization management account administrators can only unsubscribe users if they created that subscription. They can also view other accounts the user is subscribed through by choosing **Share settings profile with member accounts** on the **Settings** page. This allows them to coordinate with respective member account administrators for unsubscription. Alternatively, if they have the appropriate permissions, they can sign in as a member account administrator and unsubscribe the user directly. 
-
-To unsubscribe a group, the organization or member account administrator who created the association must: 
-
-  1. Sign in to the Amazon Q subscription management console.
-
-  2. Select the group that you want to unsubscribe
-
-  3. Choose **Unsubscribe**.
+If you are the administrator of an AWS standalone account, an AWS management account, or an AWS member account, use the following procedure to unsubscribe users from your account.
@@ -33,0 +9 @@ To unsubscribe a group, the organization or member account administrator who cre
+For more information about AWS management and member accounts, see [Managing AWS accounts in an organization with AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts.html).
@@ -34,0 +11 @@ To unsubscribe a group, the organization or member account administrator who cre
+Notes about unsubscribing users:
@@ -35,0 +13 @@ To unsubscribe a group, the organization or member account administrator who cre
+  * If you are an administrator of either a management or member account within an organization managed by [AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html), you can only unsubscribe users if your created their subscriptions.
@@ -37 +15 @@ To unsubscribe a group, the organization or member account administrator who cre
-Account administrators can also unsubscribe users or groups from accounts they manage, and have created associations for. Note that member account administrators can only view and unsubscribe users subscribed within the account they have permissions for, and only if they created that specific subscription. This means that if both a member account administrator and an organization administrator have subscribed a user, both account administrators must unsubscribe the user for them to be fully unsubscribed. 
+  * If a user has been subscribed in both member and management accounts, both account administrators must unsubscribe the user from their respective accounts for the user to be fully unsubscribed.
@@ -39 +17 @@ Account administrators can also unsubscribe users or groups from accounts they m
-To unsubscribe a user you manage, use the following procedure: 
+  * If you are a management account administrator, you can view other accounts the user is subscribed in by choosing **View subscriptions from member accounts** on the **Settings** page of the Amazon Q Developer console. This allows you to coordinate with member account administrators for unsubscription. Alternatively, if you have the appropriate permissions, you can sign in as a member account administrator and unsubscribe the user directly. For more information about viewing member account subscriptions as a management account administrator, see [Viewing an aggregated list of Amazon Q Developer subscriptions](./subscribe-visibility.html). 
@@ -41 +19 @@ To unsubscribe a user you manage, use the following procedure:
-  1. Sign in to the Amazon Q subscription console.
+  * After unsubscribing users or groups, their subscriptions are marked as **Canceled** , and they can no longer access Amazon Q Developer features. (They can still use the [Free tier](./q-free-tier.html) though, provided they have not exceeded their Free tier limits.) The final monthly subscription fee is charged at the end of the current billing cycle for all users who had active subscriptions. You'll be charged for the full month; the fee won't be prorated.
@@ -43 +20,0 @@ To unsubscribe a user you manage, use the following procedure:
-  2. Select the **User** tab, and select the end user you want to unsubscribe. 
@@ -45 +21,0 @@ To unsubscribe a user you manage, use the following procedure:
-  3. Review the associations for that end user.
@@ -47 +22,0 @@ To unsubscribe a user you manage, use the following procedure:
-  4. Choose **Unsubscribe**.
@@ -48,0 +24 @@ To unsubscribe a user you manage, use the following procedure:
+###### To unsubscribe a user or group you manage
@@ -49,0 +26 @@ To unsubscribe a user you manage, use the following procedure:
+  1. Sign in to the AWS Management Console using your AWS standalone, management, or member account.
@@ -50,0 +28 @@ To unsubscribe a user you manage, use the following procedure:
+  2. Switch to the Amazon Q Developer console.
@@ -52 +30 @@ To unsubscribe a user you manage, use the following procedure:
-For more information, see [Managing AWS accounts in your organization](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts.html).
+  3. Choose the **Users** or **Groups** tab.
@@ -54 +32 @@ For more information, see [Managing AWS accounts in your organization](https://d
-## Unsubscribing from Amazon Q Business
+  4. Choose the user or group you want to unsubscribe.
@@ -56 +34 @@ For more information, see [Managing AWS accounts in your organization](https://d
-To unsubscribe from Amazon Q Business, see [Deleting user subscriptions](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/manage-user-subscriptions.html) in the _Amazon Q Business User Guide_. 
+  5. Choose **More actions**.
@@ -58 +36 @@ To unsubscribe from Amazon Q Business, see [Deleting user subscriptions](https:/
-## Unsubscribing from Amazon QuickSight Q
+  6. Choose **Unsubscribe**.
@@ -60 +37,0 @@ To unsubscribe from Amazon Q Business, see [Deleting user subscriptions](https:/
-To unsubscribe from Amazon QuickSight Q, see [Unsubscribing from Amazon QuickSight Q](https://docs.aws.amazon.com/quicksight/latest/user/quicksight-q-unsubscribe.html) in the _Amazon QuickSight User Guide_.
@@ -62 +38,0 @@ To unsubscribe from Amazon QuickSight Q, see [Unsubscribing from Amazon QuickSig
-###### Note
@@ -64 +39,0 @@ To unsubscribe from Amazon QuickSight Q, see [Unsubscribing from Amazon QuickSig
-If a user is using both Amazon QuickSight and Amazon Q Business as part of Amazon Q Business Pro, then you must remove the user from both services in order to avoid further billing for that user.
@@ -72 +47 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Aggregating subscriptions
+Viewing an aggregate list of subscriptions