AWS chatbot documentation change
Summary
Added network security analysis capabilities documentation and integration with AWS Shield network security director
Security assessment
Introduces documentation for a new security feature (network security analysis) that identifies misconfigurations and provides remediation steps. While this adds security-related documentation, there is no evidence it addresses a specific security vulnerability.
Diff
diff --git a/chatbot/latest/adminguide/asking-questions.md b/chatbot/latest/adminguide/asking-questions.md index a2dc9b531..1b386b458 100644 --- a//chatbot/latest/adminguide/asking-questions.md +++ b//chatbot/latest/adminguide/asking-questions.md @@ -5 +5 @@ -Adding Amazon Q Developer in chat channels permissionsAWS servicesResourcesCostsTelemetry and operationsNetwork connectivity issues +Adding Amazon Q Developer in chat applications permissionsAWS servicesResourcesCostsTelemetry and operationsNetwork connectivity issuesNetwork security @@ -10,0 +11,3 @@ AWS Chatbot is now Amazon Q Developer. [Learn more](./service-rename.html) +Chatting about network security is in preview, and is subject to change. +--- + @@ -22,0 +26,2 @@ By adding Amazon Q Developer permissions to your role settings and channel guard + * Network security + @@ -30 +35 @@ Amazon Q Developer is available in Microsoft Teams and Slack channels configured - * Adding Amazon Q Developer in chat channels permissions + * Adding Amazon Q Developer in chat applications permissions @@ -34 +39 @@ Amazon Q Developer is available in Microsoft Teams and Slack channels configured - * Chatting about AWS resources + * Chatting about your AWS resources @@ -41,0 +47 @@ Amazon Q Developer is available in Microsoft Teams and Slack channels configured + * Chatting about your network security @@ -45 +51,2 @@ Amazon Q Developer is available in Microsoft Teams and Slack channels configured -## Adding Amazon Q Developer in chat channels permissions + +## Adding Amazon Q Developer in chat applications permissions @@ -49 +56 @@ To get AI powered answers to your questions about AWS and your AWS account resou -###### To chat with Amazon Q Developer in chat channels in natural language +###### To chat with Amazon Q Developer in chat applications in natural language @@ -73 +80 @@ If you require administrator access, you can use the [AmazonQFullAccess managed - 1. Open the [Amazon Q Developer in chat channels console](https://console.aws.amazon.com/chatbot). + 1. Open the [Amazon Q Developer in chat applications console](https://console.aws.amazon.com/chatbot). @@ -108 +115 @@ You can ask Amazon Q Developer these service questions directly from your chat c -## Chatting about AWS resources +## Chatting about your AWS resources @@ -173,0 +181,39 @@ You can ask Amazon Q Developer these network connectivity questions directly fro +## Chatting about your network security + +Amazon Q Developer helps you analyze your network security configurations, identify missing or misconfigured AWS network security services, and provides recommendations for a stronger network security posture. You can understand network security findings, implement remediation steps, and follow security best practices without interrupting your workflow. + +When you ask Amazon Q about your network security configurations, responses include specific information about your resources, related security findings, and detailed remediation instructions as well as links to learn more in the AWS Management Console. + +For more information about network security analysis with Amazon Q, see [Get insights with Amazon Q Developer](https://docs.aws.amazon.com/waf/latest/developerguide/nsd-security-insights.html) in the _AWS Shield network security director Developer Guide_. + +### Prerequisites + +For Amazon Q to answer questions about your network security, you must also enable AWS Shield network security director. + +#### Enable AWS Shield network security director + +To chat about your network security configurations with Amazon Q, you must enable AWS Shield network security director in your AWS account. + +###### To enable AWS Shield network security director + + 1. Open the [AWS Shield network security director console](https://console.aws.amazon.com/nsd/). + + 2. Follow the setup instructions to enable the service. + + 3. Run a network analysis to collect information about your network security posture. + + + + +### Commonly asked questions + +You can ask Amazon Q Developer these network security questions directly from your chat channels. + +`@Amazon Q Identify my top network security findings` + +`@Amazon Q Summarize the network security of my environment` + +`@Amazon Q Are my systems at risk of DDoS attacks?` + +`@Amazon Q How can I improve my network security?` +