AWS amazonq documentation change
Summary
Added permissions (q:CreateAuthGrant, q:UpdateOAuthAppConnection, etc.) to managed policies and updated policy descriptions
Security assessment
Expands documentation for IAM policies governing authentication/authorization workflows (OAuth app connections, event handling). These changes support security-related features but do not indicate fixes for existing vulnerabilities.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/managed-policy.md b/amazonq/latest/qdeveloper-ug/managed-policy.md index 90de48c89..b58947bae 100644 --- a//amazonq/latest/qdeveloper-ug/managed-policy.md +++ b//amazonq/latest/qdeveloper-ug/managed-policy.md @@ -63 +63,6 @@ To enable full access to complete administrative tasks in the Amazon Q subscript - "q:ListTagsForResource" + "q:ListTagsForResource", + "q:CreateAuthGrant", + "q:CreateOAuthAppConnection", + "q:SendEvent", + "q:UpdateAuthGrant", + "q:UpdateOAuthAppConnection" @@ -273 +278,2 @@ This policy grants permission to connect with Amazon Q and utilize the features - "q:DeleteOAuthAppConnection" + "q:DeleteOAuthAppConnection", + "q:UpdateOAuthAppConnection" @@ -296 +302,3 @@ Change | Description | Date -GitLabDuoWithAmazonQPermissionsPolicy \- New policy | Allows GitLab to connect with Amazon Q to use GitLab Duo with Amazon Q integration features. | April 17, 2025 +AmazonQFullAccess \- Updated policy | Additional permissions have been added to allow access and enable interactions with Amazon Q Developer for third-party plugins. | April 30, 2025 +GitLabDuoWithAmazonQPermissionsPolicy \- Updated policy | Additional permission has been added to allow udpates to a third-party OAuth application with Amazon Q Developer. | April 30, 2025 +GitLabDuoWithAmazonQPermissionsPolicy \- New policy | Allows GitLab to connect with Amazon Q Developer to use GitLab Duo with Amazon Q integration features. | April 17, 2025