AWS chatbot documentation change
Summary
Updated service name references from 'Amazon Q Developer' to 'Amazon Q Developer in chat channels' throughout the document to clarify service context
Security assessment
The changes are purely nomenclature updates to specify 'in chat channels' context. No permissions, policies, or security controls were modified. The service-linked role (AWSServiceRoleForAWSChatbot) and its managed IAM policy remain unchanged.
Diff
diff --git a/chatbot/latest/adminguide/slr-permissions.md b/chatbot/latest/adminguide/slr-permissions.md index eb8a806f4..79d5c16a6 100644 --- a//chatbot/latest/adminguide/slr-permissions.md +++ b//chatbot/latest/adminguide/slr-permissions.md @@ -9 +9 @@ AWS Chatbot is now Amazon Q Developer. [Learn more](./service-rename.html) -# Amazon Q Developer Service-linked role for performing operations on Amazon SNS topics and CloudWatch Logs +# Amazon Q Developer in chat channels Service-linked role for performing operations on Amazon SNS topics and CloudWatch Logs @@ -11 +11 @@ AWS Chatbot is now Amazon Q Developer. [Learn more](./service-rename.html) -Amazon Q Developer uses the service-linked role named **AWSServiceRoleForAWSChatbot**. This is a managed IAM policy with scoped permissions that Amazon Q Developer needs to run in customers’ accounts. +Amazon Q Developer uses the service-linked role named **AWSServiceRoleForAWSChatbot**. This is a managed IAM policy with scoped permissions that Amazon Q Developer in chat channels needs to run in customers’ accounts. @@ -15 +15 @@ Amazon Q Developer uses the service-linked role named **AWSServiceRoleForAWSChat -The Amazon Q Developer service-linked role gives permissions for the following services and resources: +The Amazon Q Developer in chat channels service-linked role gives permissions for the following services and resources: @@ -24 +24 @@ The Amazon Q Developer service-linked role gives permissions for the following s -These permissions allow Amazon Q Developer to perform operations on Amazon SNS topics and CloudWatch Logs. +These permissions allow Amazon Q Developer in chat channels to perform operations on Amazon SNS topics and CloudWatch Logs. @@ -26 +26 @@ These permissions allow Amazon Q Developer to perform operations on Amazon SNS t -Administrators can view, but can't edit, the permissions for the Amazon Q Developer service-linked role. +Administrators can view, but can't edit, the permissions for the Amazon Q Developer in chat channels service-linked role. @@ -37 +37 @@ You must configure permissions to allow an IAM entity (such as a user, group, or -When you create an Amazon Q Developer configuration, it creates the following policy for the service-linked role: +When you create an Amazon Q Developer in chat channels configuration, it creates the following policy for the service-linked role: @@ -68 +68 @@ When you create an Amazon Q Developer configuration, it creates the following po -You don't need to take any action to support this role beyond using the Amazon Q Developer service. +You don't need to take any action to support this role beyond using the Amazon Q Developer in chat channels service. @@ -72 +72 @@ You don't need to take any action to support this role beyond using the Amazon Q -When you configure Amazon Q Developer in chat applications for the first time, you configure a Microsoft Teams channel, a Slack channel, or Amazon Chime webhook to work with Amazon Simple Notification Service (Amazon SNS) topics for forwarding notifications to chat rooms. When you create the first resource, Amazon Q Developer automatically creates the IAM service-linked role, which can be seen in the IAM console. You don't need to manually create or configure this role. +When you configure Amazon Q Developer in chat applications for the first time, you configure a Microsoft Teams channel, a Slack channel, or Amazon Chime webhook to work with Amazon Simple Notification Service (Amazon SNS) topics for forwarding notifications to chat rooms. When you create the first resource, Amazon Q Developer in chat channels automatically creates the IAM service-linked role, which can be seen in the IAM console. You don't need to manually create or configure this role. @@ -82 +82 @@ Under specific circumstances, you can manually delete the **AWSServiceRoleForAWS -To delete the Amazon Q Developer service-linked role, you must delete all Amazon Q Developer resources in your AWS account, including all Slack channels and Amazon Chime webhooks. You can delete all Amazon Q Developer resources using the Amazon Q Developer in chat applications console, and then use the IAM console or AWS Command Line Interface (AWS CLI) to delete the service-linked role. +To delete the Amazon Q Developer in chat channels service-linked role, you must delete all Amazon Q Developer in chat channels resources in your AWS account, including all Slack channels and Amazon Chime webhooks. You can delete all Amazon Q Developer in chat channels resources using the Amazon Q Developer in chat applications console, and then use the IAM console or AWS Command Line Interface (AWS CLI) to delete the service-linked role. @@ -88 +88 @@ If Amazon Q Developer is using the **AWSServiceRoleForAWSChatbot** service-linke -###### To delete Amazon Q Developer resources +###### To delete Amazon Q Developer in chat channels resources @@ -114 +114 @@ If Amazon Q Developer is using the **AWSServiceRoleForAWSChatbot** service-linke -If you delete the Amazon Q Developer service-linked role, and then need to use it again, simply open the Amazon Q Developer in chat applications console and create a new Slack channel or Amazon Chime webhook resource to recreate the role in your account. When you create the first new resource in Amazon Q Developer, it creates the service-linked role for you again. +If you delete the Amazon Q Developer in chat channels service-linked role, and then need to use it again, simply open the Amazon Q Developer in chat applications console and create a new Slack channel or Amazon Chime webhook resource to recreate the role in your account. When you create the first new resource in Amazon Q Developer, it creates the service-linked role for you again.