AWS chatbot documentation change
Summary
Updated documentation to consistently specify 'Amazon Q Developer in chat channels' instead of generic 'Amazon Q Developer' throughout the text
Security assessment
The changes clarify the exact service component (chat channels) to which resource-based policies apply, but do not address vulnerabilities or introduce new security features. This appears to be documentation precision improvement rather than security-related remediation.
Diff
diff --git a/chatbot/latest/adminguide/security_iam_service-with-iam-resource-based-policies.md b/chatbot/latest/adminguide/security_iam_service-with-iam-resource-based-policies.md index 2ffc776f7..e7e86f83a 100644 --- a//chatbot/latest/adminguide/security_iam_service-with-iam-resource-based-policies.md +++ b//chatbot/latest/adminguide/security_iam_service-with-iam-resource-based-policies.md @@ -5 +5 @@ -Using the Amazon Q Developer resource in a policyExample: Amazon Q Developer in chat applications resource-level permission +Using the Amazon Q Developer in chat channels resource in a policyExample: Amazon Q Developer in chat applications resource-level permission @@ -15 +15 @@ _Resource-level permissions_ define the AWS resources on which you allow assigne -Amazon Q Developer doesn't support _resource-based policies_ , which are directly attached to AWS resources. For more information about the differences between policies and permissions, see [Identity-Based Policies and Resource-Based Policies ](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_identity-vs-resource.html)in the _IAM User Guide_. +Amazon Q Developer in chat channels doesn't support _resource-based policies_ , which are directly attached to AWS resources. For more information about the differences between policies and permissions, see [Identity-Based Policies and Resource-Based Policies ](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_identity-vs-resource.html)in the _IAM User Guide_. @@ -17 +17 @@ Amazon Q Developer doesn't support _resource-based policies_ , which are directl -For more information about the differences between IAM policies and permissions, see [Identity-Based Policies and Resource-Based Policies ](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_identity-vs-resource.html)in the _IAM User Guide_. The following sections describe how resource-level permissions work with Amazon Q Developer. +For more information about the differences between IAM policies and permissions, see [Identity-Based Policies and Resource-Based Policies ](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_identity-vs-resource.html)in the _IAM User Guide_. The following sections describe how resource-level permissions work with Amazon Q Developer in chat channels. @@ -21 +21 @@ For more information about the differences between IAM policies and permissions, - * Using the Amazon Q Developer resource in a policy + * Using the Amazon Q Developer in chat channels resource in a policy @@ -28 +28 @@ For more information about the differences between IAM policies and permissions, -## Using the Amazon Q Developer resource in a policy +## Using the Amazon Q Developer in chat channels resource in a policy @@ -30 +30 @@ For more information about the differences between IAM policies and permissions, -You can set up an IAM policy that defines _who_ (users, groups and roles) can perform actions on Amazon Q Developer resources. The policy uses _resource-level permissions_ to determine _which_ Amazon Q Developer resources that users of the IAM policy can work with. The policy also defines _how_ they can work with them (through Actions and Conditions). +You can set up an IAM policy that defines _who_ (users, groups and roles) can perform actions on Amazon Q Developer in chat channels resources. The policy uses _resource-level permissions_ to determine _which_ Amazon Q Developer in chat channels resources that users of the IAM policy can work with. The policy also defines _how_ they can work with them (through Actions and Conditions). @@ -32 +32 @@ You can set up an IAM policy that defines _who_ (users, groups and roles) can pe -When creating an IAM policy, you refer to the **chat-configuration** resource by its Amazon Resource Name (ARN). An Amazon Q Developer resource ARN consists of three objects: +When creating an IAM policy, you refer to the **chat-configuration** resource by its Amazon Resource Name (ARN). An Amazon Q Developer in chat channels resource ARN consists of three objects: @@ -38 +38 @@ When creating an IAM policy, you refer to the **chat-configuration** resource by -Amazon Q Developer assumes the IAM role in the customer's account and makes API calls to other AWS services to get necessary information. For example, for an Amazon CloudWatch alarm notification, Amazon Q Developer requires the metric graphic image displayed with the CloudWatch alarm notification. For that, Amazon Q Developer calls a CloudWatch API with the customer's credentials. +Amazon Q Developer in chat channels assumes the IAM role in the customer's account and makes API calls to other AWS services to get necessary information. For example, for an Amazon CloudWatch alarm notification, Amazon Q Developer in chat channels requires the metric graphic image displayed with the CloudWatch alarm notification. For that, Amazon Q Developer in chat channels calls a CloudWatch API with the customer's credentials. @@ -49 +49 @@ The `configuration-name` field is the name for the Slack channel or Amazon Chime -The Amazon Q Developer resource ARN has the following format: +The Amazon Q Developer in chat channels resource ARN has the following format: @@ -71 +71 @@ When you create the permissions, ensure that any Actions apply to the correct co -You can use resource-based permissions to allow or deny access to one or more Amazon Q Developer resources in an IAM policy, or to all Amazon Q Developer resources. +You can use resource-based permissions to allow or deny access to one or more Amazon Q Developer in chat channels resources in an IAM policy, or to all Amazon Q Developer in chat channels resources.