AWS amazonq documentation change
Summary
Removed IAM authentication method, updated CLI tool version to 1.0.0, added note about stable network requirement, and revised dependency upgrade instructions
Security assessment
Removal of IAM authentication method simplifies authentication but doesn't explicitly address a security vulnerability. Version update from 0.6.0 to 1.0.0 could indicate general availability but no security fixes mentioned. Network stability note is operational guidance, not security-related.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/run-CLI-transformations.md b/amazonq/latest/qdeveloper-ug/run-CLI-transformations.md index 9fb212f3b..0ca68284d 100644 --- a//amazonq/latest/qdeveloper-ug/run-CLI-transformations.md +++ b//amazonq/latest/qdeveloper-ug/run-CLI-transformations.md @@ -9,3 +8,0 @@ PrerequisitesStep 1: Choose authentication method and add permissionsStep 2: Ins -Transforming code with Amazon Q on the command line is in preview, and is subject to change. ---- - @@ -35 +32 @@ Before you begin a transformation on the command line, the following prerequisit -You can authenticate with AWS Identity and Access Management (IAM) or IAM Identity Center to run transformations on the command line. Regardless of the authentication method you use, ensure you have the proper permissions. +You can authenticate IAM Identity Center to run transformations on the command line. Ensure you have the proper permissions. @@ -45,23 +41,0 @@ The IAM identity associated with either the AWS CLI profile or the Amazon Q Deve -### Authenticate with IAM - -###### Note - -You can't use IAM to authenticate with a Amazon Q Developer subscription. - -To authenticate with IAM, you must: - - * Install the AWS Command Line Interface (AWS CLI). For more information, see [Getting started with the AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-getting-started.html). - - * Configure an AWS CLI profile with a `credentials` file where your IAM credentials are stored. - -For more information on adding your IAM credentials to your AWS CLI profile, see [Configuration and credential file settings in the AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-files.html). - - * Add the required permissions to your IAM identity. For more information, see Add permissions. - - - - -You can specify this configuration on your command line by running `aws configure` after installing the AWS CLI. - -You provide the AWS CLI profile you configured in Step 4: Configure and authenticate. - @@ -78 +52 @@ You provide the Start URL in Step 4: Configure and authenticate. - 1. [Download the Amazon Q command line tool for transformations](https://desktop-release.codewhisperer.us-east-1.amazonaws.com/amzn_qct_cli/amzn_qct_cli-0.6.0.zip). + 1. [Download the Amazon Q command line tool for transformations](https://desktop-release.codewhisperer.us-east-1.amazonaws.com/amzn_qct_cli/amzn_qct_cli-1.0.0.zip). @@ -92 +66 @@ To download a previous version of the command line tool, see [Version history](. - pip install amzn_qct_cli-0.6.0-py3-none-any.whl + pip install amzn_qct_cli-1.0.0-py3-none-any.whl @@ -96 +70 @@ To download a previous version of the command line tool, see [Version history](. -If you are using an older version of the command line tool for transformations, replace `0.6.0` with the [version](./transform-CLI-versions.html) you downloaded. +If you are using an older version of the command line tool for transformations, replace `1.0.0` with the [version](./transform-CLI-versions.html) you downloaded. @@ -111 +85,3 @@ First party dependencies refer to the libraries, plugins, and frameworks that yo -For Amazon Q to upgrade any first party dependencies, you must specify them in the file. It can update third party dependencies that you don’t specify, but if there are any dependencies or versions you want to make sure it upgrades, add them to the file. +You can specify first party dependencies you want to upgrade in a YAML file, and Amazon Q upgrades them during the JDK upgrade (for example, Java 8 to 17). You can initiate a separate transformation (17 to 17 or 21 to 21) after the initial JDK upgrade to upgrade third-party dependencies. + +Once Amazon Q performs a minimum JDK upgrade, you can initiate a separate transformation to upgrade all third party dependencies. Alternatively, you can specify third party dependencies and their versions in a YAML file to only upgrade those dependencies during the library upgrade transformation. @@ -176 +152 @@ Before you can begin a transformation, you must authenticate to the AWS CLI and - 1. If you're authenticating with IAM and you haven't already configured the AWS CLI, run the following command to provide authentication details. For requirements to authenticate with IAM on the AWS CLI, see Authenticate with IAM. + 1. If you're authenticating with IAM and you haven't already configured the AWS CLI, run the following command to provide authentication details. @@ -215,0 +192,4 @@ Choose the type of transformation you're performing to see the required configur +###### Note + +Do not turn off or close your local machine during the code transformation because client-side build requires a stable network connection. +