AWS amazonq documentation change
Summary
Updated subscription workflow documentation, removed specific options for subscribing users, and modified references to IAM Identity Center regions and console access details.
Security assessment
The changes primarily restructure subscription options and clarify documentation links. No explicit security vulnerabilities, patches, or security feature enhancements are mentioned. The references to IAM Identity Center and identity-enhanced sessions are existing security controls, but the changes do not introduce new security-related content or address vulnerabilities.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/subscribe-member.md b/amazonq/latest/qdeveloper-ug/subscribe-member.md index e6469e980..1083bcc56 100644 --- a//amazonq/latest/qdeveloper-ug/subscribe-member.md +++ b//amazonq/latest/qdeveloper-ug/subscribe-member.md @@ -11 +11 @@ A _member account_ is an AWS account, other than the management account, that is -If you are the owner of a member account, you have a few options for subscribing users to Amazon Q Developer Pro: +If you are the owner of a member account, to subscribe users to Amazon Q Developer Pro in your account. @@ -13,12 +13 @@ If you are the owner of a member account, you have a few options for subscribing - * **Option 1** : You can create new users and groups in your member account, and then subscribe them. - - * **Option 2** : If you have existing users and groups in an IAM Identity Center instance in your member account, you can create subscriptions for these users in your member account. - - * **Option 3** : If you have existing users and groups in an IAM Identity Center instance in a _management account_ , you can create subscriptions for these users in your member account. - - - - -For all options, use the following instructions to subscribe users. - -Not sure whether to subscribe users in a member or management account? See [Subscribe users to Amazon Q Developer Pro across accounts](./tracking-across-org.html) for help. +Not sure whether to subscribe users in a member or management account? See [Step 1: Choose a deployment option](./deployment-options.html) for help. @@ -36 +25 @@ Before you begin, make sure that: - * (Optional) You have an organization instance of IAM Identity Center set up in the _management account_ or you have an account instance of IAM Identity Center set up in your _member account_. This IAM Identity Center contains the users you want to subscribe to Amazon Q Developer Pro, and must be deployed in a supported AWS Region, as described in [Supported Regions for IAM Identity Center](./q-admin-setup-subscribe-regions.html#pro-subscription-regions). If you don't have an IAM Identity Center instance installed, that's ok. One will be installed when you subscribe the first user. For more information about IAM Identity Center, see [Organization and account instances of IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-center-instances.html). + * (Optional) You have an organization instance of IAM Identity Center set up in the _management account_ or you have an account instance of IAM Identity Center set up in your _member account_. This IAM Identity Center contains the users you want to subscribe to Amazon Q Developer Pro, and must be deployed in a supported AWS Region, as described in [IAM Identity Center Regions supported by Amazon Q Developer](./q-admin-setup-subscribe-regions.html#pro-subscription-regions). If you don't have an IAM Identity Center instance installed, that's ok. One will be installed when you subscribe the first user. For more information about IAM Identity Center, see [Organization and account instances of IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-center-instances.html). @@ -98 +87 @@ For instructions on adding users to IAM Identity Center, see [Add users to your -If you want to allow users to use their Amazon Q Developer Pro subscription [on AWS apps and websites](./q-on-aws.html), enable identity-enhanced console sessions. For more information, see [Enabling identity-enhanced console sessions](https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-aware-sessions.html) in the _AWS IAM Identity Center User Guide_. +If you want to allow users to use their Amazon Q Developer Pro subscription [in the AWS Management Console, and on AWS apps and websites](./q-on-aws.html), enable identity-enhanced console sessions. For more information, see [Enabling identity-enhanced console sessions](https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-aware-sessions.html) in the _AWS IAM Identity Center User Guide_. @@ -100 +89 @@ If you want to allow users to use their Amazon Q Developer Pro subscription [on -If you don't enable identity-enhanced console sessions, users can still use Amazon Q on AWS apps and websites, but they'll be limited to the Free tier. +If you don't enable identity-enhanced console sessions, users can still use Amazon Q in the AWS Management Console, and on AWS apps and websites, but they'll be limited to the Free tier. @@ -104 +93 @@ If you don't enable identity-enhanced console sessions, users can still use Amaz -The ability to enable identity-enhanced console sessions—and therefore the ability to use Amazon Q Developer Pro subscriptions on AWS apps and websites—is only supported with organization instances of IAM Identity Center, not account instances. +The ability to enable identity-enhanced console sessions—and therefore the ability to use Amazon Q Developer Pro subscriptions in the AWS Management Console, and on AWS apps and websites—is only supported with organization instances of IAM Identity Center, not account instances. @@ -143 +132 @@ In a management account -Across accounts +Pro tier subscriptions