AWS amazonq documentation change
Summary
Updated subscription process documentation with changes to IAM Identity Center setup, profile installation steps, console navigation, and resource creation details.
Security assessment
Changes focus on procedural updates (e.g., profile installation instead of service enablement) and IAM Identity Center setup clarifications. While IAM Identity Center relates to security, there is no evidence these changes address a specific vulnerability or weakness. The updates explain existing security practices rather than introducing new security features.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/subscribe-standalone.md b/amazonq/latest/qdeveloper-ug/subscribe-standalone.md index b04e871d5..f8fe1e7d8 100644 --- a//amazonq/latest/qdeveloper-ug/subscribe-standalone.md +++ b//amazonq/latest/qdeveloper-ug/subscribe-standalone.md @@ -5 +5 @@ -PrerequisitesStep 1: Enable Amazon Q Developer Pro and subscribe yourself Step 2: Subscribe team membersWhat resources were created? +PrerequisitesStep 1: Install the Amazon Q Developer Pro profile and subscribe yourself Step 2: Subscribe team membersWhat resources were created? @@ -21 +21 @@ Before you begin, make sure that: - * You have the minimum permissions required to subscribe users and manage Amazon Q Developer settings. For more information, see [Allow administrators to use the Amazon Q subscription console](./id-based-policy-examples-admins.html#q-admin-setup-admin-users-sub), and [Allow administrators to use the Amazon Q Developer console](./id-based-policy-examples-admins.html#q-admin-setup-admin-users). + * You have the minimum permissions required to subscribe users and manage Amazon Q Developer settings. For more information, see [Allow administrators to use the Amazon Q console](./id-based-policy-examples-admins.html#q-admin-setup-admin-users-sub), and [Allow administrators to use the Amazon Q Developer console](./id-based-policy-examples-admins.html#q-admin-setup-admin-users). @@ -22,0 +23 @@ Before you begin, make sure that: + * (Optional) You have an account instance of IAM Identity Center set up in your standalone account. This IAM Identity Center contains the users you want to subscribe to Amazon Q Developer Pro, and must be deployed in a supported AWS Region, as described in [Supported Regions for IAM Identity Center](./q-admin-setup-subscribe-regions.html#pro-subscription-regions). If you don't have an IAM Identity Center instance installed, that's ok. One will be installed when you subscribe the first user (yourself). For more information about IAM Identity Center, see [Organization and account instances of IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-center-instances.html). @@ -23,0 +25 @@ Before you begin, make sure that: +###### Note @@ -24,0 +27 @@ Before you begin, make sure that: +The instructions on this page assume you have not already installed an IAM Identity Center instance in your standalone account. @@ -26,5 +28,0 @@ Before you begin, make sure that: -## Step 1: Enable Amazon Q Developer Pro and subscribe yourself - - 1. Sign in to the AWS Management Console using your standalone AWS account. Sign in as the root user, or as an IAM user with the permissions described in Prerequisites. - - 2. Do one of the following: @@ -32 +29,0 @@ Before you begin, make sure that: - * Go to the **Amazon Q Developer** console and then choose **Subscribe to Amazon Q** , which will redirect you to the **Amazon Q** console. @@ -34 +30,0 @@ Before you begin, make sure that: -Or @@ -36 +32 @@ Or - * Go directly to the **Amazon Q** console. +## Step 1: Install the Amazon Q Developer Pro profile and subscribe yourself @@ -38 +34 @@ Or - 3. Make sure you're in the AWS Region where you want to subscribe yourself. You might have been switched to the US East (N. Virginia) Region if you came from the Amazon Q Developer console, so you might need to switch back. For supported Regions, see [Amazon Q Developer Pro Region support](./q-admin-setup-subscribe-regions.html). + 1. Sign in to the AWS Management Console using your standalone AWS account. Sign in as the root user, or as an IAM user with the permissions described in Prerequisites. @@ -40 +36 @@ Or -The Amazon Q console appears. + 2. Switch to the **Amazon Q Developer** console. @@ -42 +38 @@ The Amazon Q console appears. - + 3. Make sure you're in the AWS Region where you want to install the [Amazon Q Developer profile](./subscribe-understanding-profile.html) and where you want to store user data. For supported Regions, see [Supported Regions for the Q Developer console and Q Developer profile](./q-admin-setup-subscribe-regions.html#qdev-console-and-profile-regions). @@ -48 +44 @@ The Amazon Q console appears. -If you see a **Subscribe** button instead of **Get started** button, it means that you've already run through the 'Get started' workflow and can skip to Step 2: Subscribe team members. +If you see a **Settings** button instead of **Get started** button, it means that you've already run through the 'Get started' workflow and can skip to Step 2: Subscribe team members. @@ -52,2 +47,0 @@ A **Create your user** dialog box appears. - - @@ -58 +52 @@ Choose **Continue**. -A welcome dialog box appears. +The **Create Amazon Q Developer profile** dialog box appears. @@ -60 +54 @@ A welcome dialog box appears. - + 6. Review the contents of the dialog box and provide a name for your profile in **Profile name**. For help with cross-region inferencing, see [Cross-region processing in Amazon Q Developer](./cross-region-processing.html). For help with disabling dashboard metrics, see [Disabling the Amazon Q Developer dashboard](./dashboard-disabling.html). @@ -62 +56 @@ A welcome dialog box appears. - 6. Choose **Enable and subscribe** to enable Amazon Q Developer Pro in your account and subscribe. +Choose **Create application**. @@ -64 +58 @@ A welcome dialog box appears. -A **You're subscribed** dialog box appears. +The Amazon Q Developer profile and managed application are installed, and your subscription is created. @@ -66 +60 @@ A **You're subscribed** dialog box appears. - + 7. (Optional) Verify that your subscription was created: @@ -68,5 +62 @@ A **You're subscribed** dialog box appears. - 7. Choose **Done**. - - 8. (Optional) Verify that your subscription was created: - - 1. In the Amazon Q console, in the navigation pane, choose **Subscriptions**. + 1. In the Amazon Q Developer console, in the navigation pane, choose **Subscriptions**. @@ -78,2 +67,0 @@ Your subscription should appear in the list in the **Pending** state. If not, re - - @@ -112 +100 @@ IAM Identity Center was set up on your behalf when you subscribed yourself. For - 1. Return to the Amazon Q console (not the Amazon Q Developer console). + 1. Return to the Amazon Q Developer console. @@ -114 +102 @@ IAM Identity Center was set up on your behalf when you subscribed yourself. For - 2. In the navigation pane, choose **Getting started** , and then choose **Subscribe**. + 2. In the navigation pane, choose **Subscriptions** , and then choose **Subscribe**. @@ -118,7 +106 @@ The **Assign users and groups** dialog box appears. - - - 3. Choose **Get started**. - - 4. Start typing the name of a team member or group that you added. The name should auto-populate. - - + 3. Start typing the name of a team member or group that you added. The name should auto-populate. @@ -126 +108 @@ The **Assign users and groups** dialog box appears. - 5. Choose **Assign**. + 4. Choose **Assign**. @@ -128 +110 @@ The **Assign users and groups** dialog box appears. - 6. Have users check their email. They should receive an email titled **Activate Your Amazon Q Developer Pro Subscription** within 24 hours. In this email, users will find guidance on how to begin using their Amazon Q Developer Pro license in the AWS Management Console and their Integrated Development Environment (IDE). The email includes users' unique Start URL and AWS Region for authentication, and provides quickstart steps for using Amazon Q Developer in their IDE. This email streamlines the onboarding process and saves you valuable time by eliminating the need for you to manually notify each new user. + 5. Have users check their email. They should receive an email titled **Activate Your Amazon Q Developer Pro Subscription** within 24 hours. In this email, users will find guidance on how to begin using their Amazon Q Developer Pro license in the AWS Management Console and their Integrated Development Environment (IDE). The email includes users' unique Start URL and AWS Region for authentication, and provides quickstart steps for using Amazon Q Developer in their IDE. This email streamlines the onboarding process and saves you valuable time by eliminating the need for you to manually notify each new user. @@ -141 +123 @@ When you subscribed yourself (and optionally, team members), Amazon Q created th -Account instances of IAM Identity Center have [limitations](https://docs.aws.amazon.com/singlesignon/latest/userguide/account-instances-identity-center.html#about-account-instance). For example, account instances don't support console access. (Users can still use Amazon Q in the console, it's just that they'll be subject to the Free tier monthly limits.) If you want to use Amazon Q Developer Pro in the console and other AWS websites, you must be a user in an _organization instance_ of IAM Identity Center, in a management account. For more information, see [Subscribe users in a management account](./subscribe-management.html). +Account instances of IAM Identity Center have [limitations](https://docs.aws.amazon.com/singlesignon/latest/userguide/account-instances-identity-center.html#about-account-instance). For example, account instances don't support console access. (Users can still use Amazon Q in the console, it's just that they'll be subject to the Free tier monthly limits.) If you want to use Amazon Q Developer Pro in the console and other AWS websites, you must be a user in an _organization instance_ of IAM Identity Center, in a management account. For more information, see [Subscribe users to Amazon Q Developer Pro in a management account](./subscribe-management.html). @@ -151 +133 @@ You can't convert or merge an account instance of IAM Identity Center into an or - * **A managed application** called **QDefaultProfile** , in the IAM Identity Center that is set up in your standalone account. The application enables an Amazon Q Developer profile (see the next bullet for details). The application is created once and shared between all Amazon Q subscribers in your standalone account. + * **An Amazon Q Developer profile** , in the Amazon Q Developer console, under **Settings**. @@ -153 +135 @@ You can't convert or merge an account instance of IAM Identity Center into an or - * **An Amazon Q Developer profile** , in the Amazon Q Developer console, under **Settings**. An _Amazon Q Developer profile_ is a collection of Amazon Q Developer settings associated with a **QDefaultProfile** application. For more information about the Amazon Q Developer profile, see [Understanding Amazon Q Developer profiles](./q-admin-setup-subscribe-understanding.html#subscribe-understanding-profile). + * **A managed application** called **QDefaultProfile** , in the IAM Identity Center that is set up in your standalone account. The application is associated with the Amazon Q Developer profile. Like the Amazon Q Developer profile, the application is created once and shared between all Amazon Q subscribers in your standalone account.