AWS chatbot documentation change
Summary
Updated documentation to consistently specify 'Amazon Q Developer in chat channels' instead of generic 'Amazon Q Developer' throughout IAM policy documentation
Security assessment
The changes clarify the exact service scope (chat channels) for IAM policies but do not address any specific security vulnerabilities or introduce new security features. This appears to be documentation precision improvement rather than security-related modification.
Diff
diff --git a/chatbot/latest/adminguide/security-iam.md b/chatbot/latest/adminguide/security-iam.md index 951cf4786..2ce85c51c 100644 --- a//chatbot/latest/adminguide/security-iam.md +++ b//chatbot/latest/adminguide/security-iam.md @@ -25 +25 @@ How you use AWS Identity and Access Management (IAM) differs, depending on the w -Before you use IAM to manage access to Amazon Q Developer, you should understand which IAM features are available to use with Amazon Q Developer. The following subsections introduce each IAM capability supported by Amazon Q Developer, point you to further information about how to use them, and describe the IAM capabilities that Amazon Q Developer doesn't support. To get a high-level view of how Amazon Q Developer and other AWS services work with IAM, see [AWS Services That Work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) in the _IAM User Guide_. +Before you use IAM to manage access to Amazon Q Developer, you should understand which IAM features are available to use with Amazon Q Developer. The following subsections introduce each IAM capability supported by Amazon Q Developer in chat channels, point you to further information about how to use them, and describe the IAM capabilities that Amazon Q Developer in chat channels doesn't support. To get a high-level view of how Amazon Q Developer and other AWS services work with IAM, see [AWS Services That Work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) in the _IAM User Guide_. @@ -33 +33 @@ For an overview of IAM and its features, see [Understanding How IAM Works](https - * Resource-level permissions and Amazon Q Developer + * Resource-level permissions and Amazon Q Developer in chat channels @@ -35 +35 @@ For an overview of IAM and its features, see [Understanding How IAM Works](https - * Condition keys and Amazon Q Developer + * Condition keys and Amazon Q Developer in chat channels @@ -50 +50 @@ For an overview of IAM and its features, see [Understanding How IAM Works](https -Amazon Q Developer supports the use of IAM identity-based policies for service usage and management. +Amazon Q Developer in chat channels supports the use of IAM identity-based policies for service usage and management. @@ -54 +54 @@ An AWS Identity and Access Management (IAM) _policy_ is a document that defines -_Identity-based policies_ are attached to an IAM user, group, or role (identity). These policies let you specify what that AWS identity can do (its permissions). For example, you can attach an identity policy to the IAM user named adesai, to allow that user to perform the Amazon Q Developer `DescribeSlackChannels` action. +_Identity-based policies_ are attached to an IAM user, group, or role (identity). These policies let you specify what that AWS identity can do (its permissions). For example, you can attach an identity policy to the IAM user named adesai, to allow that user to perform the Amazon Q Developer in chat channels `DescribeSlackChannels` action. @@ -56 +56 @@ _Identity-based policies_ are attached to an IAM user, group, or role (identity) -For information about, and examples of, using identity-based policies with Amazon Q Developer, see [Amazon Q Developer Identity-Based Policies](./security_iam_service-with-iam-id-based-policies.html). +For information about, and examples of, using identity-based policies with Amazon Q Developer in chat channels, see [Amazon Q Developer Identity-Based Policies](./security_iam_service-with-iam-id-based-policies.html). @@ -60 +60 @@ For more general information about how IAM identity-based policies work, see [Id -### Resource-level permissions and Amazon Q Developer +### Resource-level permissions and Amazon Q Developer in chat channels @@ -64 +64 @@ _Resource-level permissions_ are JSON policy statements that specify the AWS res -When you customize IAM policies for users to work with the Amazon Q Developer service, one of your primary options for policy editing is to configure resource-based permissions for your policies. +When you customize IAM policies for users to work with the Amazon Q Developer in chat channels service, one of your primary options for policy editing is to configure resource-based permissions for your policies. @@ -66 +66 @@ When you customize IAM policies for users to work with the Amazon Q Developer se -Amazon Q Developer supports resource-level permissions, but not resource-based policies. +Amazon Q Developer in chat channels supports resource-level permissions, but not resource-based policies. @@ -68 +68 @@ Amazon Q Developer supports resource-level permissions, but not resource-based p -For more information about how IAM resource-level permissions work with Amazon Q Developer, see [IAM Resource-Level Permissions for Amazon Q Developer](./security_iam_service-with-iam-resource-based-policies.html). +For more information about how IAM resource-level permissions work with Amazon Q Developer in chat channels, see [IAM Resource-Level Permissions for Amazon Q Developer in chat channels](./security_iam_service-with-iam-resource-based-policies.html). @@ -70 +70 @@ For more information about how IAM resource-level permissions work with Amazon Q -### Condition keys and Amazon Q Developer +### Condition keys and Amazon Q Developer in chat channels @@ -82 +82 @@ AWS supports global condition keys and service-specific condition keys. To see a -Amazon Q Developer doesn't define any service-specific condition keys. It supports global condition keys. To see all actions and resources for which Amazon Q Developer can use global condition keys, see [Actions, Resources, and Condition Keys for Amazon Q Developer](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awschatbot.html#awschatbot-policy-keys) in the _IAM User Guide_. For more information about AWS global condition keys, see [AWS Global Condition Context Keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html) in the _IAM User Guide_. +Amazon Q Developer doesn't define any service-specific condition keys. It supports global condition keys. To see all actions and resources for which Amazon Q Developer in chat channels can use global condition keys, see [Actions, Resources, and Condition Keys for Amazon Q Developer in chat channels](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awschatbot.html#awschatbot-policy-keys) in the _IAM User Guide_. For more information about AWS global condition keys, see [AWS Global Condition Context Keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html) in the _IAM User Guide_. @@ -113 +113 @@ AWS supports additional, less common policy types. These policy types can set th -Amazon Q Developer is a global service that requires access to all AWS Regions. If there is a policy in place that prevents access to services in certain Regions, you must change the policy to allow global Amazon Q Developer access. +Amazon Q Developer in chat channels is a global service that requires access to all AWS Regions. If there is a policy in place that prevents access to services in certain Regions, you must change the policy to allow global Amazon Q Developer in chat channels access. @@ -123 +123 @@ Security -IAM policies for Amazon Q Developer +IAM policies for Amazon Q Developer in chat channels