AWS amazonq medium security documentation change
Summary
Clarified preview URL usage requirements and added explicit instruction to call CreateAnonymousWebExperienceUrl API for new sessions
Security assessment
Added enforcement of one-time URL usage, 5-minute access window, and session regeneration requirements. These changes address session management security controls to prevent unauthorized access through expired URLs.
Diff
diff --git a/amazonq/latest/qbusiness-ug/supported-exp-actions-anonymous.md b/amazonq/latest/qbusiness-ug/supported-exp-actions-anonymous.md index be5b0adb3..10b72a622 100644 --- a//amazonq/latest/qbusiness-ug/supported-exp-actions-anonymous.md +++ b//amazonq/latest/qbusiness-ug/supported-exp-actions-anonymous.md @@ -28 +28 @@ To manage Amazon Q Business web experiences for anonymous access, you can take t -If you created a web experience when you created your applicationou can preview Amazon Q Business web experience for anonymous access, you can use the console or the [CreateAnonymousWebExperienceUrl](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_CreateAnonymousWebExperienceUrl.html) API operation. +If you created a web experience when you created your application, you can preview that Amazon Q Business web experience for anonymous access, using the console or the [CreateAnonymousWebExperienceUrl](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_CreateAnonymousWebExperienceUrl.html) API operation. @@ -32 +32 @@ If you created a web experience when you created your applicationou can preview - * The preview URL for the web experience is for one-time use only and has to be regenerated every time. This URL must be accessed within 5 minutes of creation. Once accessed, the session remains active for the configured duration. To use the web experience in your applications, use [Amazon Q embedded](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/embed-amazon-q-business.html). + * The preview URL for the web experience is for one-time use only and has to be regenerated every time. This URL must be accessed within 5 minutes of creation. Once accessed, the session remains active for the configured duration. To use the web experience in your applications, you must use the [Amazon Q embedded](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/embed-amazon-q-business.html) feature and call the [CreateAnonymousWebExperienceUrl](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_CreateAnonymousWebExperienceUrl.html) API operation whenever you need a new application session or after one hour whichever comes first.