AWS amazonq documentation change
Summary
Added documentation for log file locations, log levels, and security warnings about sensitive data in logs
Security assessment
The addition explicitly warns users that logs may contain sensitive information and provides guidance for local log management. This improves security awareness but does not address a specific vulnerability.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/command-line-settings.md b/amazonq/latest/qdeveloper-ug/command-line-settings.md index 88cfae7aa..f19f82927 100644 --- a//amazonq/latest/qdeveloper-ug/command-line-settings.md +++ b//amazonq/latest/qdeveloper-ug/command-line-settings.md @@ -5 +5 @@ -Accessing settingsCommand line settings managementAutocomplete and inline suggestionsOther Amazon Q CLI commands +Accessing settingsCommand line settings managementAutocomplete and inline suggestionsOther Amazon Q CLI commandsLog files @@ -82,0 +83,43 @@ For more information about any command, use the `--help` flag: +## Log files + +Amazon Q Developer CLI maintains log files that can be useful for troubleshooting. These logs are stored locally on your machine and are not sent to AWS. + +Log files are located at: + + * **macOS** : `~/Library/Logs/amazonq/` + + * **Linux** : `~/.local/share/amazonq/logs/` + + + + +The log level can be controlled by setting the `Q_LOG_LEVEL` environment variable. Valid values are: + + * `error`: Only error messages (default) + + * `warn`: Warning and error messages + + * `info`: Informational, warning, and error messages + + * `debug`: Debug, informational, warning, and error messages + + * `trace`: All messages including detailed trace information + + + + +###### Warning + +Log files may contain sensitive information from your conversations and interactions with Amazon Q, including file paths, code snippets, and command outputs. While these logs are stored only on your local machine and are not sent to AWS, you should be cautious when sharing log files with others. + +Example of setting the log level (for debugging purposes): + + + # For bash/zsh + export Q_LOG_LEVEL=debug + q chat + + # For fish + set -x Q_LOG_LEVEL debug + q chat +