AWS chatbot documentation change
Summary
Updated terminology from 'chat channels' to 'chat applications' throughout document, added example IAM policy configuration for chat applications, and modified section headers/links to reflect service name change
Security assessment
The changes primarily update service naming conventions and add an example IAM policy configuration. While IAM policies are security-related, there is no evidence of addressing a specific vulnerability or security incident. The modifications improve documentation clarity about existing security features rather than responding to a security issue.
Diff
diff --git a/chatbot/latest/adminguide/security_iam_service-with-iam-id-based-policies.md b/chatbot/latest/adminguide/security_iam_service-with-iam-id-based-policies.md index 8776f3870..37dff2ad2 100644 --- a//chatbot/latest/adminguide/security_iam_service-with-iam-id-based-policies.md +++ b//chatbot/latest/adminguide/security_iam_service-with-iam-id-based-policies.md @@ -5 +5 @@ -Identity-based policies for Amazon Q Developer in chat applicationsIdentity-based policy best practicesApplying Amazon Q Developer in chat channels permissions to an IAM identityAllowing users to view their permissions +Identity-based policies for Amazon Q Developer in chat applicationsIdentity-based policy best practicesApplying Amazon Q Developer in chat applications permissions to an IAM identityAllowing users to view their permissions @@ -19 +19 @@ To learn about all of the elements that you use in a JSON policy, see [IAM JSON -For information about the specific IAM JSON policy elements that Amazon Q Developer in chat channels supports, see [Actions, Resources, and Condition Keys for Amazon Q Developer in chat channels](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awschatbot.html#awschatbot-policy-keys) in the _IAM User Guide_. +For information about the specific IAM JSON policy elements that Amazon Q Developer in chat applications supports, see [Actions, Resources, and Condition Keys for Amazon Q Developer in chat applications](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awschatbot.html#awschatbot-policy-keys) in the _IAM User Guide_. @@ -27 +27 @@ For information about the specific IAM JSON policy elements that Amazon Q Develo - * Applying Amazon Q Developer in chat channels permissions to an IAM identity + * Applying Amazon Q Developer in chat applications permissions to an IAM identity @@ -42 +42 @@ In an identity-based policy, you don't specify the principal who gets the permis -To learn about all of the elements that you use in a policy, see [IAM JSON Policy Elements Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the _IAM User Guide_. For information about the specific IAM JSON policy elements that Amazon Q Developer in chat channels supports, see [Actions, Resources, and Condition Keys for Amazon Q Developer in chat channels](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awschatbot.html#awschatbot-policy-keys) in the _IAM User Guide_. +To learn about all of the elements that you use in a policy, see [IAM JSON Policy Elements Reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the _IAM User Guide_. For information about the specific IAM JSON policy elements that Amazon Q Developer in chat applications supports, see [Actions, Resources, and Condition Keys for Amazon Q Developer in chat applications](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_awschatbot.html#awschatbot-policy-keys) in the _IAM User Guide_. @@ -44 +44 @@ To learn about all of the elements that you use in a policy, see [IAM JSON Polic -### Amazon Q Developer in chat channels actions for identity-based policies +### Amazon Q Developer in chat applications actions for identity-based policies @@ -95 +95,8 @@ For more information about best practices in IAM, see [Security best practices i -## Applying Amazon Q Developer in chat channels permissions to an IAM identity +## Applying Amazon Q Developer in chat applications permissions to an IAM identity + +The following example of an Amazon Q Developer in chat applications identity-based policy controls all aspects of Slack chat room configuration. It grants full read-only permissions to Amazon CloudWatch and Amazon CloudWatch Logs, and Amazon Simple Notification Service (Amazon SNS) topics. It enables Slack chat room configuration through both the Amazon Q Developer in chat applications console and CLI actions. + +JSON + + +**** @@ -97 +103,0 @@ For more information about best practices in IAM, see [Security best practices i -The following example of an Amazon Q Developer in chat channels identity-based policy controls all aspects of Slack chat room configuration. It grants full read-only permissions to Amazon CloudWatch and Amazon CloudWatch Logs, and Amazon Simple Notification Service (Amazon SNS) topics. It enables Slack chat room configuration through both the Amazon Q Developer in chat channels console and CLI actions. @@ -180 +187 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -IAM policies for Amazon Q Developer in chat channels +IAM policies for Amazon Q Developer in chat applications @@ -182 +189 @@ IAM policies for Amazon Q Developer in chat channels -IAM resource-level permissions for Amazon Q Developer in chat channels +IAM resource-level permissions for Amazon Q Developer in chat applications