AWS chatbot documentation change
Summary
Updated terminology from 'chat channels' to 'chat applications' throughout the document, including section headers and policy references. Added JSON code block formatting markers.
Security assessment
Changes are primarily terminology updates (chat channels → chat applications) and documentation formatting. No modifications to actual security policies, permissions, or vulnerability mitigations. The IAM policy content remains functionally identical with only service name references updated.
Diff
diff --git a/chatbot/latest/adminguide/editing-iam-roles-for-chatbot.md b/chatbot/latest/adminguide/editing-iam-roles-for-chatbot.md index 90b94c570..ab7d3cd89 100644 --- a//chatbot/latest/adminguide/editing-iam-roles-for-chatbot.md +++ b//chatbot/latest/adminguide/editing-iam-roles-for-chatbot.md @@ -9 +9 @@ AWS Chatbot is now Amazon Q Developer. [Learn more](./service-rename.html) -# Editing an IAM role for Amazon Q Developer in chat channels +# Editing an IAM role for Amazon Q Developer in chat applications @@ -15 +15 @@ You can create new IAM roles in the Amazon Q Developer in chat applications cons -AWS requires that you use the IAM console to edit IAM roles. If you create roles in the Amazon Q Developer in chat applications console, you must use the IAM console to edit them. This might happen, for example, when you are using the Amazon Q Developer in chat channels service and a new release comes out that supports new features. +AWS requires that you use the IAM console to edit IAM roles. If you create roles in the Amazon Q Developer in chat applications console, you must use the IAM console to edit them. This might happen, for example, when you are using the Amazon Q Developer in chat applications service and a new release comes out that supports new features. @@ -17 +17 @@ AWS requires that you use the IAM console to edit IAM roles. If you create roles -Use the IAM console to edit Amazon Q Developer in chat channels roles. You can use the entire set of IAM console features to specify permissions for your Amazon Q Developer in chat channels users. +Use the IAM console to edit Amazon Q Developer in chat applications roles. You can use the entire set of IAM console features to specify permissions for your Amazon Q Developer in chat applications users. @@ -34 +34 @@ Channel role -You can attach AWS managed policies and customer managed policies. Amazon Q Developer in chat channels roles support both types of IAM policies. +You can attach AWS managed policies and customer managed policies. Amazon Q Developer in chat applications roles support both types of IAM policies. @@ -47 +47 @@ User roles -You can attach AWS managed policies and customer managed policies. Amazon Q Developer in chat channels roles support both types of IAM policies. +You can attach AWS managed policies and customer managed policies. Amazon Q Developer in chat applications roles support both types of IAM policies. @@ -55 +55 @@ You can attach AWS managed policies and customer managed policies. Amazon Q Deve - 4. Choose the name of the policy that you want. You can use the **Search** box to search for the policy by name or by a partial string of characters. For example, all IAM policies associated with Amazon Q Developer in chat channels include the character string **Chatbot** as part of the policy name. + 4. Choose the name of the policy that you want. You can use the **Search** box to search for the policy by name or by a partial string of characters. For example, all IAM policies associated with Amazon Q Developer in chat applications include the character string **Chatbot** as part of the policy name. @@ -84 +84 @@ After you click **Attach policy** , the role's **Permissions** page opens and sh -For more information about the customer managed policies and AWS managed policies described in this section, see [IAM Policies for Amazon Q Developer in chat channels](./chatbot-iam-policies.html). +For more information about the customer managed policies and AWS managed policies described in this section, see [IAM Policies for Amazon Q Developer in chat applications](./chatbot-iam-policies.html). @@ -88 +88 @@ For more information about editing IAM policies, see [Editing IAM Policies](http -## Managing IAM role permissions for running commands in Amazon Q Developer in chat channels +## Managing IAM role permissions for running commands in Amazon Q Developer in chat applications @@ -90 +90 @@ For more information about editing IAM policies, see [Editing IAM Policies](http -With AWS Identity and Access Management (IAM), you can use _identity-based policies_ , which are JSON permissions policy documents, and attach them to an _identity_ , such as a user, role, or group. These policies work with your guardrail policies to control what actions a user can perform. Amazon Q Developer in chat channels provides the following IAM policies in the Amazon Q Developer in chat applications console that you can use to set up AWS CLI commands support for chat channels. Those policies include: +With AWS Identity and Access Management (IAM), you can use _identity-based policies_ , which are JSON permissions policy documents, and attach them to an _identity_ , such as a user, role, or group. These policies work with your guardrail policies to control what actions a user can perform. Amazon Q Developer in chat applications provides the following IAM policies in the Amazon Q Developer in chat applications console that you can use to set up AWS CLI commands support for chat channels. Those policies include: @@ -101 +101 @@ With AWS Identity and Access Management (IAM), you can use _identity-based polic -You can use any or all of these policies, based on your organization's requirements. To use them, create a new channel role in your channel configuration using the Amazon Q Developer in chat applications console, and attach the policies there. You can also attach the policies to the Amazon Q Developer in chat channels IAM roles using the IAM console. The policies simplify Amazon Q Developer in chat channels role configuration and enable you to set up quickly. +You can use any or all of these policies, based on your organization's requirements. To use them, create a new channel role in your channel configuration using the Amazon Q Developer in chat applications console, and attach the policies there. You can also attach the policies to the Amazon Q Developer in chat applications IAM roles using the IAM console. The policies simplify Amazon Q Developer in chat applications role configuration and enable you to set up quickly. @@ -112 +112 @@ You can define custom permissions in a policy to limit actions to specific resou -For more information on these policies, see [Configuring an IAM Role for Amazon Q Developer in chat channels](./editing-iam-roles-for-chatbot.html). +For more information on these policies, see [Configuring an IAM Role for Amazon Q Developer in chat applications](./editing-iam-roles-for-chatbot.html). @@ -114 +114 @@ For more information on these policies, see [Configuring an IAM Role for Amazon -### Using the Amazon Q Developer in chat channels read-only command permissions policy +### Using the Amazon Q Developer in chat applications read-only command permissions policy @@ -116 +116 @@ For more information on these policies, see [Configuring an IAM Role for Amazon -The Amazon Q Developer in chat channels **ReadOnly Command Permissions** policy controls access to several important AWS services, including IAM, AWS Security Token Service (AWS STS), AWS Key Management Service (AWS KMS), and Amazon S3. It disallows all IAM operations when using AWS commands in Microsoft Teams and Slack. When you use the **ReadOnly Command Permissions** policy, you allow or deny the following permissions to users who run commands in chat channels: +The Amazon Q Developer in chat applications **ReadOnly Command Permissions** policy controls access to several important AWS services, including IAM, AWS Security Token Service (AWS STS), AWS Key Management Service (AWS KMS), and Amazon S3. It disallows all IAM operations when using AWS commands in Microsoft Teams and Slack. When you use the **ReadOnly Command Permissions** policy, you allow or deny the following permissions to users who run commands in chat channels: @@ -144,0 +145,6 @@ The **ReadOnly Command Permissions** policy JSON code is shown following: +JSON + + +**** + + @@ -177 +184 @@ The **ReadOnly Command Permissions** policy JSON code is shown following: -The Amazon Q Developer in chat channels **Lambda-Invoke Command Permissions** policy allows users to invoke AWS Lambda functions in chat channels. This policy is an AWS managed policy that is not specific to Amazon Q Developer in chat channels, though it appears in the Amazon Q Developer in chat applications console. +The Amazon Q Developer in chat applications **Lambda-Invoke Command Permissions** policy allows users to invoke AWS Lambda functions in chat channels. This policy is an AWS managed policy that is not specific to Amazon Q Developer in chat applications, though it appears in the Amazon Q Developer in chat applications console. @@ -182,0 +190,6 @@ The following example shows the **Lambda-Invoke Command Permissions** policy: +JSON + + +**** + +