AWS chatbot documentation change
Summary
Updated documentation to consistently use 'Amazon Q Developer in chat channels' terminology instead of generic 'Amazon Q Developer' references. Added specificity about chat channel context in IAM role management.
Security assessment
Changes are primarily branding/terminology updates (adding 'in chat channels' qualifier) rather than security content modifications. No new security vulnerabilities or mitigations are introduced. Existing security-related content about IAM policies (like ReadOnly Command Permissions restricting IAM operations) remains functionally unchanged.
Diff
diff --git a/chatbot/latest/adminguide/editing-iam-roles-for-chatbot.md b/chatbot/latest/adminguide/editing-iam-roles-for-chatbot.md index 53a0e2b78..90b94c570 100644 --- a//chatbot/latest/adminguide/editing-iam-roles-for-chatbot.md +++ b//chatbot/latest/adminguide/editing-iam-roles-for-chatbot.md @@ -9 +9 @@ AWS Chatbot is now Amazon Q Developer. [Learn more](./service-rename.html) -# Editing an IAM role for Amazon Q Developer +# Editing an IAM role for Amazon Q Developer in chat channels @@ -15 +15 @@ You can create new IAM roles in the Amazon Q Developer in chat applications cons -AWS requires that you use the IAM console to edit IAM roles. If you create roles in the Amazon Q Developer in chat applications console, you must use the IAM console to edit them. This might happen, for example, when you are using the Amazon Q Developer service and a new release comes out that supports new features. +AWS requires that you use the IAM console to edit IAM roles. If you create roles in the Amazon Q Developer in chat applications console, you must use the IAM console to edit them. This might happen, for example, when you are using the Amazon Q Developer in chat channels service and a new release comes out that supports new features. @@ -17 +17 @@ AWS requires that you use the IAM console to edit IAM roles. If you create roles -Use the IAM console to edit Amazon Q Developer roles. You can use the entire set of IAM console features to specify permissions for your Amazon Q Developer users. +Use the IAM console to edit Amazon Q Developer in chat channels roles. You can use the entire set of IAM console features to specify permissions for your Amazon Q Developer in chat channels users. @@ -34 +34 @@ Channel role -You can attach AWS managed policies and customer managed policies. Amazon Q Developer roles support both types of IAM policies. +You can attach AWS managed policies and customer managed policies. Amazon Q Developer in chat channels roles support both types of IAM policies. @@ -47 +47 @@ User roles -You can attach AWS managed policies and customer managed policies. Amazon Q Developer roles support both types of IAM policies. +You can attach AWS managed policies and customer managed policies. Amazon Q Developer in chat channels roles support both types of IAM policies. @@ -55 +55 @@ You can attach AWS managed policies and customer managed policies. Amazon Q Deve - 4. Choose the name of the policy that you want. You can use the **Search** box to search for the policy by name or by a partial string of characters. For example, all IAM policies associated with Amazon Q Developer include the character string **Chatbot** as part of the policy name. + 4. Choose the name of the policy that you want. You can use the **Search** box to search for the policy by name or by a partial string of characters. For example, all IAM policies associated with Amazon Q Developer in chat channels include the character string **Chatbot** as part of the policy name. @@ -84 +84 @@ After you click **Attach policy** , the role's **Permissions** page opens and sh -For more information about the customer managed policies and AWS managed policies described in this section, see [IAM Policies for Amazon Q Developer](./chatbot-iam-policies.html). +For more information about the customer managed policies and AWS managed policies described in this section, see [IAM Policies for Amazon Q Developer in chat channels](./chatbot-iam-policies.html). @@ -88 +88 @@ For more information about editing IAM policies, see [Editing IAM Policies](http -## Managing IAM role permissions for running commands in Amazon Q Developer +## Managing IAM role permissions for running commands in Amazon Q Developer in chat channels @@ -90 +90 @@ For more information about editing IAM policies, see [Editing IAM Policies](http -With AWS Identity and Access Management (IAM), you can use _identity-based policies_ , which are JSON permissions policy documents, and attach them to an _identity_ , such as a user, role, or group. These policies work with your guardrail policies to control what actions a user can perform. Amazon Q Developer provides the following IAM policies in the Amazon Q Developer in chat applications console that you can use to set up AWS CLI commands support for chat channels. Those policies include: +With AWS Identity and Access Management (IAM), you can use _identity-based policies_ , which are JSON permissions policy documents, and attach them to an _identity_ , such as a user, role, or group. These policies work with your guardrail policies to control what actions a user can perform. Amazon Q Developer in chat channels provides the following IAM policies in the Amazon Q Developer in chat applications console that you can use to set up AWS CLI commands support for chat channels. Those policies include: @@ -101 +101 @@ With AWS Identity and Access Management (IAM), you can use _identity-based polic -You can use any or all of these policies, based on your organization's requirements. To use them, create a new channel role in your channel configuration using the Amazon Q Developer in chat applications console, and attach the policies there. You can also attach the policies to the Amazon Q Developer IAM roles using the IAM console. The policies simplify Amazon Q Developer role configuration and enable you to set up quickly. +You can use any or all of these policies, based on your organization's requirements. To use them, create a new channel role in your channel configuration using the Amazon Q Developer in chat applications console, and attach the policies there. You can also attach the policies to the Amazon Q Developer in chat channels IAM roles using the IAM console. The policies simplify Amazon Q Developer in chat channels role configuration and enable you to set up quickly. @@ -112 +112 @@ You can define custom permissions in a policy to limit actions to specific resou -For more information on these policies, see [Configuring an IAM Role for Amazon Q Developer](./editing-iam-roles-for-chatbot.html). +For more information on these policies, see [Configuring an IAM Role for Amazon Q Developer in chat channels](./editing-iam-roles-for-chatbot.html). @@ -114 +114 @@ For more information on these policies, see [Configuring an IAM Role for Amazon -### Using the Amazon Q Developer read-only command permissions policy +### Using the Amazon Q Developer in chat channels read-only command permissions policy @@ -116 +116 @@ For more information on these policies, see [Configuring an IAM Role for Amazon -The Amazon Q Developer **ReadOnly Command Permissions** policy controls access to several important AWS services, including IAM, AWS Security Token Service (AWS STS), AWS Key Management Service (AWS KMS), and Amazon S3. It disallows all IAM operations when using AWS commands in Microsoft Teams and Slack. When you use the **ReadOnly Command Permissions** policy, you allow or deny the following permissions to users who run commands in chat channels: +The Amazon Q Developer in chat channels **ReadOnly Command Permissions** policy controls access to several important AWS services, including IAM, AWS Security Token Service (AWS STS), AWS Key Management Service (AWS KMS), and Amazon S3. It disallows all IAM operations when using AWS commands in Microsoft Teams and Slack. When you use the **ReadOnly Command Permissions** policy, you allow or deny the following permissions to users who run commands in chat channels: @@ -177 +177 @@ The **ReadOnly Command Permissions** policy JSON code is shown following: -The Amazon Q Developer **Lambda-Invoke Command Permissions** policy allows users to invoke AWS Lambda functions in chat channels. This policy is an AWS managed policy that is not specific to Amazon Q Developer, though it appears in the Amazon Q Developer in chat applications console. +The Amazon Q Developer in chat channels **Lambda-Invoke Command Permissions** policy allows users to invoke AWS Lambda functions in chat channels. This policy is an AWS managed policy that is not specific to Amazon Q Developer in chat channels, though it appears in the Amazon Q Developer in chat applications console.