AWS amazonq medium security documentation change
Summary
Updated workspace collaboration requirements, simplified onboarding steps, and added email notification documentation
Security assessment
Removed text about uninvited users seeing workspace names/membership (potential information disclosure) and changed access requirements. This addresses exposure of workspace metadata to unauthorized users.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/transform.md b/amazonq/latest/qdeveloper-ug/transform.md index aacd60db6..157fb9ca3 100644 --- a//amazonq/latest/qdeveloper-ug/transform.md +++ b//amazonq/latest/qdeveloper-ug/transform.md @@ -5 +5 @@ -CapabilitiesQuick start: Transforming with Q Developer and a standalone accountTransforming with Q Developer and AWS OrganizationsSetting up your workspaceTerminology +CapabilitiesQuick start: Transforming with Q Developer and a standalone accountTransforming with Q Developer and AWS OrganizationsSetting up your workspaceTerminologyEmail notifications @@ -80 +80 @@ Amazon Q Developer’s transformation capabilities are designed to enable collab -In order to collaborate on a shared workspace, all users, internal and external, must be registered users of the same instance of IAM Identity Center that is associated with your instance of the the Q Developer transform web experience. Once subscribed to Amazon Q Developer Pro, all IAM Identity Center users, even if they don’t have access to a workspace, can sign in to the web experience, and see that a related workspace exists. In such cases, the uninvited user can see the name and membership of the workspace, but not other details such as jobs or artifacts. That user can then request access to any workspace that interests them. +In order to collaborate on a shared workspace, all users, internal and external, must be registered users of the same instance of IAM Identity Center that is associated with your instance of the the Q Developer transform web experience. Once subscribed to Amazon Q Developer Pro, all IAM Identity Center users, even if they don’t have access to a workspace, can sign in to the web experience. Users can then choose to create a new workspace. Or, alternatively, they can navigate to an existing workspace if another user has already invited them. @@ -96,3 +96 @@ When you create a workspace you become the administrator of that workspace. - 5. **Direct your end users sign in to the web experience for the first time.** Before you can add a user to your workspace, that user must sign in to the web experience at least once. - - 6. **Give your end users access to your workspace.** Add users to your workspace. You can only add users who are already subscribed to Amazon Q Developer Pro. + 5. **Give your end users access to your workspace.** Add users to your workspace. You can only add users who are already subscribed to Amazon Q Developer Pro. @@ -102 +100 @@ After you add collaborators, select the appropriate role for each one. - 7. **Create your first transformation job** You can initiate a new transformation job by describing your desired objectives in natural language. Amazon Q will propose a high-level approach to achieve the specified objectives. + 6. **Create your first transformation job** You can initiate a new transformation job by describing your desired objectives in natural language. Amazon Q will propose a high-level approach to achieve the specified objectives. @@ -243,0 +242,24 @@ A Q resource that contains other resources like connectors and jobs. A workspace +## Receiving email notifications + +Email notifications are enabled by default. There are three categories of email notifications: + + * **Workspace access updates:** You will receive a notification if you are added to a new workspace, or if your role is changed within a workspace. + + * **Daily digest emails:** You will receive a daily digest email summarizing your ongoing jobs if you have active jobs with one or more open collaborator request. + + * **Job status updates:** You will receive an email when a job you have access to completes or fails. + + + + +### Managing email notifications + +To modify your email notification preferences: + + 1. In the upper right corner of the application, choose the **Settings** cog icon. + + 2. Choose **Notification settings**. + + + +