AWS amazonq medium security documentation change

Service: amazonq · 2025-05-16 · Security-related medium

File: amazonq/latest/qdeveloper-ug/security_iam_permissions.md

Summary

Removed 'Q Developer transform web experience APIs' section and added new q:DeleteConversation/q:UpdateConversation permissions

Security assessment

Changes to IAM permissions documentation directly impact access control policies. The addition of DeleteConversation and UpdateConversation permissions introduces new security-relevant actions that must be managed through IAM policies.

Diff

diff --git a/amazonq/latest/qdeveloper-ug/security_iam_permissions.md b/amazonq/latest/qdeveloper-ug/security_iam_permissions.md
index 4672a52b9..b6ee8ff73 100644
--- a//amazonq/latest/qdeveloper-ug/security_iam_permissions.md
+++ b//amazonq/latest/qdeveloper-ug/security_iam_permissions.md
@@ -5 +5 @@
-Amazon Q Developer permissionsAmazon Q User Subscriptions permissionsOther Amazon Q Developer APIsQ Developer transform web experience APIs
+Amazon Q Developer permissionsAmazon Q User Subscriptions permissionsOther Amazon Q Developer APIs
@@ -28,2 +27,0 @@ This section provides information about the APIs used by Amazon Q Developer, and
-  * Q Developer transform web experience APIs
-
@@ -62,0 +61 @@ User permissions
+`q:DeleteConversation` |  Delete a conversation with Amazon Q |  Yes  
@@ -78,0 +78 @@ User permissions
+`q:UpdateConversation` |  Update a conversation with Amazon Q |  Yes  
@@ -191,79 +190,0 @@ Amazon Q Developer APIs to provide the service Name | Description of action
-## Q Developer transform web experience APIs
-
-  * q:CreateArtifactUploadUrl
-
-  * q:CreateArtifactDownloadUrl
-
-  * q:ListArtifacts
-
-  * q:CompleteArtifactUpload
-
-  * q:CreateSession
-
-  * q:GetLoginRedirectUri
-
-  * q:GetUserDetails
-
-  * q:VerifySession
-
-  * q:RevokeSession
-
-  * q:PutUserRoleMappings
-
-  * q:DetectIsAllowedForOperation
-
-  * q:BatchGetMessage
-
-  * q:ListMessages
-
-  * q:SendMessage
-
-  * q:CreateConnector
-
-  * q:GetConnector
-
-  * q:ListConnectors
-
-  * q:DeleteConnector
-
-  * q:GetHitlTask
-
-  * q:SubmitStandardHitlTask
-
-  * q:SubmitCriticalHitlTask
-
-  * q:UpdateHitlTask
-
-  * q:ListHitlTasks
-
-  * q:GetJob
-
-  * q:ListJobs
-
-  * q:CreateJob
-
-  * q:UpdateJob
-
-  * q:StartJob
-
-  * q:StopJob
-
-  * q:ListJobPlanSteps
-
-  * q:ListPlanUpdates
-
-  * q:ListWorklogs
-
-  * q:CreateWorkspace
-
-  * q:GetWorkspace
-
-  * q:ListWorkspaces
-
-  * q:UpdateWorkspace
-
-  * q:ListUserRoleMappings
-
-
-
-