AWS Security ChangesHomeSearch

AWS amazonq documentation change

Service: amazonq · 2025-06-07 · Documentation low

File: amazonq/latest/qbusiness-ug/ms-sql-server-iam-role.md

Summary

Expanded IAM policy Resource field to include both application and application/index ARNs

Security assessment

Policy syntax update following a consistent pattern across multiple files, no security context provided.

Diff

diff --git a/amazonq/latest/qbusiness-ug/ms-sql-server-iam-role.md b/amazonq/latest/qbusiness-ug/ms-sql-server-iam-role.md
index cfc6a2a13..896e94003 100644
--- a//amazonq/latest/qbusiness-ug/ms-sql-server-iam-role.md
+++ b//amazonq/latest/qbusiness-ug/ms-sql-server-iam-role.md
@@ -80 +80,4 @@ To connect your data source connector to Amazon Q, you must give Amazon Q an IAM
-                "Resource": "arn:aws:qbusiness:{{region}}:{{source_account}}:application/{{application_id}}/index/{{index_id}}"
+                "Resource": [
+            "arn:aws:qbusiness:{{region}}:{{source_account}}:application/{{application_id}}",
+            "arn:aws:qbusiness:{{region}}:{{source_account}}:application/{{application_id}}/index/{{index_id}}"
+            ]