AWS amazonq high security documentation change
Summary
Added warning about potential unauthorized information exposure in public Teams channels and reordered existing considerations
Security assessment
The first point now explicitly warns about Amazon Q generating responses based on user permissions in public channels, which could expose sensitive information to unauthorized channel members. This directly addresses a security consideration for access control.
Diff
diff --git a/amazonq/latest/qbusiness-ug/msteams-considerations.md b/amazonq/latest/qbusiness-ug/msteams-considerations.md index 70718f8b0..cf47e3a46 100644 --- a//amazonq/latest/qbusiness-ug/msteams-considerations.md +++ b//amazonq/latest/qbusiness-ug/msteams-considerations.md @@ -7 +7 @@ - 1. Amazon Q Business does not use customer data for service improvement or for improving its underlying large language models (LLMs). Also, none of the data you include in your Teams conversations will be indexed into your company's Amazon Q Business instance. For more information, see [Amazon Q Business Service improvement](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/service-improvement.html). + 1. When Amazon Q is invoked by a user in a public Teams channel, it generates responses based on the invoking user's permissions, which may include content that other channel members aren't authorized to access. To prevent unintended exposure of sensitive information, carefully evaluate the use of Amazon Q in public channels. @@ -9 +9 @@ - 2. The Amazon Q Business Teams app will have access to the same knowledge available in the corresponding Amazon Q Business web experience. + 2. Amazon Q Business does not use customer data for service improvement or for improving its underlying large language models (LLMs). Also, none of the data you include in your Teams conversations will be indexed into your company's Amazon Q Business instance. For more information, see [Amazon Q Business Service improvement](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/service-improvement.html). @@ -11 +11 @@ - 3. To reset, start new conversation, using the _/new_conversation_ command. + 3. The Amazon Q Business Teams app will have access to the same knowledge available in the corresponding Amazon Q Business web experience. @@ -13 +13 @@ - 4. When you upload a file, the Amazon Q bot for Teams will only be able to respond from the file (and general knowledge if your Amazon Q admin has enabled it). Start a new chat if you want to return to getting answers from company knowledge. + 4. To reset, start new conversation, using the _/new_conversation_ command. @@ -15 +15 @@ - 5. Closing the Amazon Q Business bot for Teams side panel will end the current conversation. Users can review past conversations in Teams or all conversations from all channels (Teams, browser extensions, etc.) in your Amazon Q Business web experience. You can access all the history of previous conversations including, the names of the attachments in those conversations. + 5. When you upload a file, the Amazon Q bot for Teams will only be able to respond from the file (and general knowledge if your Amazon Q admin has enabled it). Start a new chat if you want to return to getting answers from company knowledge. @@ -17 +17 @@ - 6. All conversations in Amazon Q Business are deleted after 30 days of inactivity. Teams may store conversations for longer depending on your company's Teams conversation history rules. + 6. Closing the Amazon Q Business bot for Teams side panel will end the current conversation. Users can review past conversations in Teams or all conversations from all channels (Teams, browser extensions, etc.) in your Amazon Q Business web experience. You can access all the history of previous conversations including, the names of the attachments in those conversations. @@ -19 +19,3 @@ - 7. Amazon Q may provide inaccurate responses at times. For more information, see [Hallucination](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/concepts-terms.html#hallucination) in the topic Key concepts of Amazon Q Business. + 7. All conversations in Amazon Q Business are deleted after 30 days of inactivity. Teams may store conversations for longer depending on your company's Teams conversation history rules. + + 8. Amazon Q may provide inaccurate responses at times. For more information, see [Hallucination](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/concepts-terms.html#hallucination) in the topic Key concepts of Amazon Q Business.