AWS amazonq high security documentation change
Summary
Added warning about potential unauthorized information exposure in public Slack channels and reordered existing considerations
Security assessment
The first point explicitly warns about potential exposure of sensitive information through public Slack channels due to permission mismatches, indicating a security consideration for access control
Diff
diff --git a/amazonq/latest/qbusiness-ug/slack-considerations.md b/amazonq/latest/qbusiness-ug/slack-considerations.md index cb3aafea7..f4fe56d89 100644 --- a//amazonq/latest/qbusiness-ug/slack-considerations.md +++ b//amazonq/latest/qbusiness-ug/slack-considerations.md @@ -7 +7 @@ - 1. Amazon Q Business does not use customer data for service improvement or for improving its underlying large language models (LLMs). Also, none of the data you include in your browser extension conversations will be indexed into your company's Amazon Q Business instance. For more information, see [Amazon Q Business Service improvement](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/service-improvement.html). + 1. When Amazon Q is invoked by a user in a public Slack channel, it generates responses based on the invoking user's permissions, which may include content that other channel members aren't authorized to access. To prevent unintended exposure of sensitive information, carefully evaluate the use of Amazon Q in public channels. @@ -9 +9 @@ - 2. The Amazon Q Business Slack app will have access to the same knowledge available in the corresponding Amazon Q Business web experience. + 2. Amazon Q Business does not use customer data for service improvement or for improving its underlying large language models (LLMs). Also, none of the data you include in your browser extension conversations will be indexed into your company's Amazon Q Business instance. For more information, see [Amazon Q Business Service improvement](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/service-improvement.html). @@ -11 +11 @@ - 3. To reset, start new conversation, direct message as a _New chat_. + 3. The Amazon Q Business Slack app will have access to the same knowledge available in the corresponding Amazon Q Business web experience. @@ -13 +13 @@ - 4. When you upload a file, the Amazon Q Slack app will only be able to respond from the file (and general knowledge if your Amazon Q admin has enabled it). Start a new chat if you want to return to getting answers from company knowledge. + 4. To reset, start new conversation, direct message as a _New chat_. @@ -15 +15 @@ - 5. Closing the Amazon Q Business Slack app side panel will end the current conversation. Users can review past conversations in Slack or all conversations from all channels (Slack, browser extensions, etc.) in your Amazon Q Business web experience. You can access all the history of previous conversations including, the names of the attachments in those conversations. + 5. When you upload a file, the Amazon Q Slack app will only be able to respond from the file (and general knowledge if your Amazon Q admin has enabled it). Start a new chat if you want to return to getting answers from company knowledge. @@ -17 +17 @@ - 6. All conversations in Amazon Q Business are deleted after 30 days of inactivity. Slack may store conversations for longer depending on yourour company's Slack conversation history rules. + 6. Closing the Amazon Q Business Slack app side panel will end the current conversation. Users can review past conversations in Slack or all conversations from all channels (Slack, browser extensions, etc.) in your Amazon Q Business web experience. You can access all the history of previous conversations including, the names of the attachments in those conversations. @@ -19 +19,3 @@ - 7. Amazon Q may provide inaccurate responses at times. For more information, see [Hallucination](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/concepts-terms.html#hallucination) in the topic Key concepts of Amazon Q Business. + 7. All conversations in Amazon Q Business are deleted after 30 days of inactivity. Slack may store conversations for longer depending on yourour company's Slack conversation history rules. + + 8. Amazon Q may provide inaccurate responses at times. For more information, see [Hallucination](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/concepts-terms.html#hallucination) in the topic Key concepts of Amazon Q Business.