AWS amazonq medium security documentation change
Summary
Clarified IAM Identity Center requirements, simplified email notification details, and expanded documentation about identity-enhanced console sessions.
Security assessment
The change removes specific details (Start URL, AWS Region) from the email notification description, reducing potential exposure of sensitive authentication information in communications. This mitigates phishing risks or accidental information leakage, making it security-related.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/subscribe-management.md b/amazonq/latest/qdeveloper-ug/subscribe-management.md index eddd8f5af..b645a42a3 100644 --- a//amazonq/latest/qdeveloper-ug/subscribe-management.md +++ b//amazonq/latest/qdeveloper-ug/subscribe-management.md @@ -27 +27 @@ Before you begin, make sure that: - * You have an organization instance of IAM Identity Center set up in your management account. This IAM Identity Center contains the users you want to subscribe to Amazon Q Developer Pro, and must be deployed in a supported AWS Region, as described in [IAM Identity Center Regions supported by Amazon Q Developer](./q-admin-setup-subscribe-regions.html#pro-subscription-regions). For more information about IAM Identity Center, see [Organization instances of IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/organization-instances-identity-center.html). + * You have an organization instance of IAM Identity Center set up in your management account. This IAM Identity Center contains the identities of the users you want to subscribe to Amazon Q Developer Pro, and must be deployed in a supported AWS Region, as described in [IAM Identity Center Regions supported by Amazon Q Developer](./q-admin-setup-subscribe-regions.html#pro-subscription-regions). For more information about IAM Identity Center, see [Organization instances of IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/organization-instances-identity-center.html) in the _AWS IAM Identity Center User Guide_. @@ -71 +71 @@ The **Assign users and groups** dialog box appears. - 5. Have users check their email. They should receive an email titled **Activate Your Amazon Q Developer Pro Subscription** within 24 hours. In this email, users will find guidance on how to begin using their Amazon Q Developer Pro license in the AWS Management Console and their Integrated Development Environment (IDE). The email includes users' unique Start URL and AWS Region for authentication, and provides quickstart steps for using Amazon Q Developer in their IDE. This email streamlines the onboarding process and saves you valuable time by eliminating the need for you to manually notify each new user. + 5. Have users check their email. They should receive an email titled **Activate Your Amazon Q Developer Pro Subscription** within 24 hours with instructions on how to begin using their Amazon Q Developer Pro license. @@ -78 +78 @@ The **Assign users and groups** dialog box appears. -If you want to allow users to use their Amazon Q Developer Pro subscription [on AWS apps and websites](./q-on-aws.html), enable identity-enhanced console sessions. For more information, see [Enabling identity-enhanced console sessions](https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-aware-sessions.html) in the _AWS IAM Identity Center User Guide_. +If you want to allow users to use their Amazon Q Developer Pro subscription [in the AWS Management Console, and on AWS apps and websites](./q-on-aws.html), enable identity-enhanced console sessions. For more information, see [Enabling identity-enhanced console sessions](https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-aware-sessions.html) in the _AWS IAM Identity Center User Guide_. @@ -82 +82 @@ If you want to allow users to use their Amazon Q Developer Pro subscription [on -If you don't enable identity-enhanced console sessions, users can still use Amazon Q on AWS apps and websites, but they'll be limited to the Free tier. +If you don't enable identity-enhanced console sessions, users can still use Amazon Q in the AWS Management Console, and on AWS apps and websites, but they'll be limited to the Free tier.