AWS chatbot documentation change
Summary
Updated documentation to consistently specify 'in chat channels' context for Amazon Q Developer security considerations. Added clarifications about command processing through Microsoft Teams/Slack and regional data handling.
Security assessment
The changes refine existing security documentation by clarifying the chat channel context, but do not address a specific vulnerability. They reinforce existing security recommendations about avoiding sensitive data in chat commands, which qualifies as security documentation maintenance rather than addressing a new issue.
Diff
diff --git a/chatbot/latest/adminguide/security.md b/chatbot/latest/adminguide/security.md index 06c8e3b57..0db66d041 100644 --- a//chatbot/latest/adminguide/security.md +++ b//chatbot/latest/adminguide/security.md @@ -5 +5 @@ -Data protection in Amazon Q Developer +Data protection in Amazon Q Developer in chat channels @@ -15 +15 @@ Security is a shared responsibility between AWS and you. The [shared responsibil - * **Security of the cloud** – AWS is responsible for protecting the infrastructure that runs AWS services in the AWS Cloud. AWS also provides you with services that you can use securely. Third-party auditors regularly test and verify our security effectiveness as part of the [AWS compliance programs](https://aws.amazon.com/compliance/programs/). To learn about the compliance programs that apply to Amazon Q Developer, see [AWS Services in Scope by Compliance Program](https://aws.amazon.com/compliance/services-in-scope/). + * **Security of the cloud** – AWS is responsible for protecting the infrastructure that runs AWS services in the AWS Cloud. AWS also provides you with services that you can use securely. Third-party auditors regularly test and verify our security effectiveness as part of the [AWS compliance programs](https://aws.amazon.com/compliance/programs/). To learn about the compliance programs that apply to Amazon Q Developer in chat channels, see [AWS Services in Scope by Compliance Program](https://aws.amazon.com/compliance/services-in-scope/). @@ -22 +22 @@ Security is a shared responsibility between AWS and you. The [shared responsibil -This documentation helps you understand how to apply the shared responsibility model when using Amazon Q Developer in chat applications. The following topics show you how to configure Amazon Q Developer to meet your security and compliance objectives. You also learn how to use other AWS services that help you to monitor and secure your Amazon Q Developer resources. +This documentation helps you understand how to apply the shared responsibility model when using Amazon Q Developer in chat applications. The following topics show you how to configure Amazon Q Developer in chat channels to meet your security and compliance objectives. You also learn how to use other AWS services that help you to monitor and secure your Amazon Q Developer in chat channels resources. @@ -26 +26 @@ This documentation helps you understand how to apply the shared responsibility m - * Data protection in Amazon Q Developer + * Data protection in Amazon Q Developer in chat channels @@ -41 +41 @@ This documentation helps you understand how to apply the shared responsibility m -## Data protection in Amazon Q Developer +## Data protection in Amazon Q Developer in chat channels @@ -64 +64 @@ We strongly recommend that you never put confidential or sensitive information, -We also strongly recommend that you don't provide secrets or confidential data to Amazon Q Developer. All commands run using Amazon Q Developer come through Microsoft Teams and Slack. As such, we recommend that you carefully consider what information you send Amazon Q Developer through Slack. Additionally, all comamnds run using Amazon Q Developer can be processed in any commercial AWS Region. +We also strongly recommend that you don't provide secrets or confidential data to Amazon Q Developer in chat channels. All commands run using Amazon Q Developer in chat channels come through Microsoft Teams and Slack. As such, we recommend that you carefully consider what information you send Amazon Q Developer in chat channels through Slack. Additionally, all comamnds run using Amazon Q Developer in chat channels can be processed in any commercial AWS Region. @@ -68 +68 @@ We also strongly recommend that you don't provide secrets or confidential data t -Amazon Q Developer doesn't modify any event, alarm, or other reporting data when it forwards Amazon Simple Notification Service (Amazon SNS) notifications to chat rooms. It treats all notifications as read only. +Amazon Q Developer in chat channels doesn't modify any event, alarm, or other reporting data when it forwards Amazon Simple Notification Service (Amazon SNS) notifications to chat rooms. It treats all notifications as read only.