AWS amazonq documentation change
Summary
Updated 'Unavailable' status explanations for groups and users to focus on trusted access being turned off in the management account, removing previous scenarios involving member accounts and IAM Identity Center.
Security assessment
The change clarifies that trusted access configuration impacts subscription status visibility. While trusted access is a security feature, there is no evidence this addresses a specific vulnerability. It improves documentation of security-related settings but does not fix a security issue.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/q-admin-setup-subscribe-status.md b/amazonq/latest/qdeveloper-ug/q-admin-setup-subscribe-status.md index 7b93ce9c9..ebd40bfe6 100644 --- a//amazonq/latest/qdeveloper-ug/q-admin-setup-subscribe-status.md +++ b//amazonq/latest/qdeveloper-ug/q-admin-setup-subscribe-status.md @@ -15,5 +15 @@ The statuses on the **Groups** tab are: - * **Unavailable** – The group is subscribed, but its status is unavailable for one of the following reasons: - - * You are currently signed in to a management account, and the group was subscribed under a member account. To see the status of groups subscribed under member accounts, you must enable organization-wide visibility of subscriptions. For more information, see [Viewing an aggregated list of Amazon Q Developer subscriptions](./subscribe-visibility.html). - - * You are currently signed in to a member account, and the group's identity is in an IAM Identity Center instance in the management account. There is no way to see the status of the group in this scenario. + * **Unavailable** – The group is subscribed, but its status is unavailable because trusted access is turned off in the management account. To turn on trusted access, see [Viewing an aggregated list of Amazon Q Developer subscriptions](./subscribe-visibility.html). @@ -32,5 +28 @@ The statuses on the **Users** tab are: - * **Unavailable** – The user is subscribed, but their status is unavailable for one of the following reasons: - - * You are currently signed in to a management account, and the user was subscribed under a member account. To see the status of users subscribed under member accounts, you must enable organization-wide visibility of subscriptions. For more information, see [Viewing an aggregated list of Amazon Q Developer subscriptions](./subscribe-visibility.html). - - * You are currently signed in to a member account, and the user's identity is in an IAM Identity Center instance in the management account. There is no way to see the status of the user in this scenario. + * **Unavailable** – The user is subscribed, but their status is unavailable because because trusted access is turned off in the management account. To turn on trusted access, see [Viewing an aggregated list of Amazon Q Developer subscriptions](./subscribe-visibility.html).