AWS Security ChangesHomeSearch

AWS amazonq documentation change

Service: amazonq · 2025-05-10 · Documentation medium

File: amazonq/latest/qbusiness-ug/embed-web-experience.md

Summary

Added requirements for anonymous application URL generation and authentication flow details

Security assessment

Documents security controls around ephemeral URL generation for anonymous access, improving clarity about access limitations. Enhances security documentation but doesn't fix an existing issue.

Diff

diff --git a/amazonq/latest/qbusiness-ug/embed-web-experience.md b/amazonq/latest/qbusiness-ug/embed-web-experience.md
index df23caf93..bc2eba7b4 100644
--- a//amazonq/latest/qbusiness-ug/embed-web-experience.md
+++ b//amazonq/latest/qbusiness-ug/embed-web-experience.md
@@ -17 +17,6 @@ Once this <iframe> is added to the website, the Amazon Q Business chat assistant
-Amazon Q Business users must provide user authentication credentials before they can use the embedded Amazon Q chat experience on your website. These credentials are the same as the credentials required for the Amazon Q web experience. To authenticate, Amazon Q opens a new browser tab or window where users can enter their credentials. Once successfully authenticated, users can close this tab or window and begin using the embedded Amazon Q chat experience within the website.
+  * For [anonymous applications](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/create-anonymous-application.html), the **Deployed URL** must be generated every time using the `[ CreateAnonymousWebExperienceUrl](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_CreateAnonymousWebExperienceUrl.html)` API operation. For more information, see [Share an anonymous web experience](./supported-exp-actions-anonymous.html#create-experience-anonymous-url).
+
+  * Amazon Q Business users must provide user authentication credentials before they can use the embedded Amazon Q chat experience on your website. These credentials are the same as the credentials required for the Amazon Q web experience. To authenticate, Amazon Q opens a new browser tab or window where users can enter their credentials. Once successfully authenticated, users can close this tab or window and begin using the embedded Amazon Q chat experience within the website.
+
+
+