AWS amazonq medium security documentation change
Summary
Updated link title for the Amazon Q Developer profile documentation and specified 'us-east-1' region in the S3 bucket policy example.
Security assessment
The change replaces a placeholder 'region' with 'us-east-1' in the 'aws:SourceArn' policy example. This enforces region-specific access control, reducing the risk of overly permissive policies that could allow unintended cross-region access. Correcting the example prevents potential misconfigurations, improving security posture.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/q-admin-prompt-logging.md b/amazonq/latest/qdeveloper-ug/q-admin-prompt-logging.md index 20a475503..8fb0b9d82 100644 --- a//amazonq/latest/qdeveloper-ug/q-admin-prompt-logging.md +++ b//amazonq/latest/qdeveloper-ug/q-admin-prompt-logging.md @@ -36 +36 @@ Create an Amazon S3 bucket to hold the prompt logs. The bucket must: - * Be in the AWS Region where the Amazon Q Developer profile was installed. This profile was installed when you subscribed users to Amazon Q Developer Pro for the first time. For more information about this profile and the Regions where it's supported, see [Amazon Q Developer profile](./subscribe-understanding-profile.html), and [Supported Regions for the Q Developer console and Q Developer profile](./q-admin-setup-subscribe-regions.html#qdev-console-and-profile-regions). + * Be in the AWS Region where the Amazon Q Developer profile was installed. This profile was installed when you subscribed users to Amazon Q Developer Pro for the first time. For more information about this profile and the Regions where it's supported, see [What is the Amazon Q Developer profile?](./subscribe-understanding-profile.html), and [Supported Regions for the Q Developer console and Q Developer profile](./q-admin-setup-subscribe-regions.html#qdev-console-and-profile-regions). @@ -68 +68 @@ JSON - "aws:SourceArn": "arn:aws:codewhisperer:region:accountId:*" + "aws:SourceArn": "arn:aws:codewhisperer:us-east-1:accountId:*"