AWS amazonq medium security documentation change
Summary
Updated link title for the Amazon Q Developer profile documentation and specified 'us-east-1' region in the S3 bucket policy example.
Security assessment
Similar to the prompt logging change, the 'aws:SourceArn' policy example now uses 'us-east-1' instead of a placeholder. This ensures region-specific access control, mitigating risks of misconfigured policies allowing broader access than intended.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/q-admin-user-telemetry.md b/amazonq/latest/qdeveloper-ug/q-admin-user-telemetry.md index e70b19e86..4090c3642 100644 --- a//amazonq/latest/qdeveloper-ug/q-admin-user-telemetry.md +++ b//amazonq/latest/qdeveloper-ug/q-admin-user-telemetry.md @@ -34 +34 @@ Create an Amazon S3 bucket to hold the user activity report CSV file. The bucket - * Be in the AWS Region where the Amazon Q Developer profile was installed. This profile was installed when you subscribed IAM Identity Center workforce users to Amazon Q Developer Pro for the first time. For more information about this profile and the Regions where it's supported, see [Amazon Q Developer profile](./subscribe-understanding-profile.html), and [Supported Regions for the Q Developer console and Q Developer profile](./q-admin-setup-subscribe-regions.html#qdev-console-and-profile-regions). + * Be in the AWS Region where the Amazon Q Developer profile was installed. This profile was installed when you subscribed IAM Identity Center workforce users to Amazon Q Developer Pro for the first time. For more information about this profile and the Regions where it's supported, see [What is the Amazon Q Developer profile?](./subscribe-understanding-profile.html), and [Supported Regions for the Q Developer console and Q Developer profile](./q-admin-setup-subscribe-regions.html#qdev-console-and-profile-regions). @@ -70 +70 @@ JSON - "aws:SourceArn": "arn:aws:codewhisperer:region:accountId:*" + "aws:SourceArn": "arn:aws:codewhisperer:us-east-1:accountId:*"