AWS Security ChangesHomeSearch

AWS amazonq documentation change

Service: amazonq · 2025-05-16 · Documentation low

File: amazonq/latest/qdeveloper-ug/id-based-policy-examples-users.md

Summary

Added q:UpdateConversation and q:DeleteConversation permissions to multiple user policy examples

Security assessment

The addition of conversation management permissions improves documentation about granular access controls but does not indicate remediation of a security vulnerability. Enhances transparency about data lifecycle controls.

Diff

diff --git a/amazonq/latest/qdeveloper-ug/id-based-policy-examples-users.md b/amazonq/latest/qdeveloper-ug/id-based-policy-examples-users.md
index 043c01e0d..f9ce5cb2b 100644
--- a//amazonq/latest/qdeveloper-ug/id-based-policy-examples-users.md
+++ b//amazonq/latest/qdeveloper-ug/id-based-policy-examples-users.md
@@ -87 +87,3 @@ The following example policy grants permissions to chat with Amazon Q in the con
-            "q:ListConversations"
+            "q:ListConversations",
+            "q:UpdateConversation",
+            "q:DeleteConversation"
@@ -202,0 +205,2 @@ The following example policy grants permission to chat with Amazon Q about resou
+            "q:UpdateConversation",
+            "q:DeleteConversation",
@@ -234,0 +239,2 @@ The following example policy grants permission to chat with Amazon Q, and allows
+            "q:UpdateConversation",
+            "q:DeleteConversation",
@@ -256,0 +263,2 @@ The following example policy grants permission to chat with Amazon Q, and allows
+            "q:UpdateConversation",
+            "q:DeleteConversation",
@@ -290,0 +299,2 @@ The following example policy grants permission to chat with Amazon Q, and allows
+            "q:UpdateConversation",
+            "q:DeleteConversation",
@@ -336,0 +347,2 @@ The following example policy grants permission to chat with Amazon Q, and allows
+            "q:UpdateConversation",
+            "q:DeleteConversation",
@@ -395 +407,3 @@ The following example policy grants permission to chat with any plugin from a gi
-                    "q:ListConversations"
+                    "q:ListConversations",
+                    "q:UpdateConversation",
+                    "q:DeleteConversation"
@@ -437 +451,3 @@ The following example policy grants permission to chat with a specific plugin, s
-                    "q:ListConversations"
+                    "q:ListConversations",
+                    "q:UpdateConversation",
+                    "q:DeleteConversation"