AWS chatbot documentation change
Summary
Updated terminology from 'chat channels' to 'chat applications' throughout the document to reflect service rebranding/renaming. Added JSON code block formatting example (empty placeholder).
Security assessment
Changes are purely terminological updates (channels → applications) and formatting adjustments. No modifications to actual permissions, security controls, or vulnerability disclosures were made. The service-linked role (AWSServiceRoleForAWSChatbot) and its permissions remain unchanged.
Diff
diff --git a/chatbot/latest/adminguide/slr-permissions.md b/chatbot/latest/adminguide/slr-permissions.md index 79d5c16a6..844eaa7cf 100644 --- a//chatbot/latest/adminguide/slr-permissions.md +++ b//chatbot/latest/adminguide/slr-permissions.md @@ -9 +9 @@ AWS Chatbot is now Amazon Q Developer. [Learn more](./service-rename.html) -# Amazon Q Developer in chat channels Service-linked role for performing operations on Amazon SNS topics and CloudWatch Logs +# Amazon Q Developer in chat applications Service-linked role for performing operations on Amazon SNS topics and CloudWatch Logs @@ -11 +11 @@ AWS Chatbot is now Amazon Q Developer. [Learn more](./service-rename.html) -Amazon Q Developer uses the service-linked role named **AWSServiceRoleForAWSChatbot**. This is a managed IAM policy with scoped permissions that Amazon Q Developer in chat channels needs to run in customers’ accounts. +Amazon Q Developer uses the service-linked role named **AWSServiceRoleForAWSChatbot**. This is a managed IAM policy with scoped permissions that Amazon Q Developer in chat applications needs to run in customers’ accounts. @@ -15 +15 @@ Amazon Q Developer uses the service-linked role named **AWSServiceRoleForAWSChat -The Amazon Q Developer in chat channels service-linked role gives permissions for the following services and resources: +The Amazon Q Developer in chat applications service-linked role gives permissions for the following services and resources: @@ -24 +24 @@ The Amazon Q Developer in chat channels service-linked role gives permissions fo -These permissions allow Amazon Q Developer in chat channels to perform operations on Amazon SNS topics and CloudWatch Logs. +These permissions allow Amazon Q Developer in chat applications to perform operations on Amazon SNS topics and CloudWatch Logs. @@ -26 +26 @@ These permissions allow Amazon Q Developer in chat channels to perform operation -Administrators can view, but can't edit, the permissions for the Amazon Q Developer in chat channels service-linked role. +Administrators can view, but can't edit, the permissions for the Amazon Q Developer in chat applications service-linked role. @@ -37 +37,7 @@ You must configure permissions to allow an IAM entity (such as a user, group, or -When you create an Amazon Q Developer in chat channels configuration, it creates the following policy for the service-linked role: +When you create an Amazon Q Developer in chat applications configuration, it creates the following policy for the service-linked role: + +JSON + + +**** + @@ -68 +74,2 @@ When you create an Amazon Q Developer in chat channels configuration, it creates -You don't need to take any action to support this role beyond using the Amazon Q Developer in chat channels service. + +You don't need to take any action to support this role beyond using the Amazon Q Developer in chat applications service. @@ -72 +79 @@ You don't need to take any action to support this role beyond using the Amazon Q -When you configure Amazon Q Developer in chat applications for the first time, you configure a Microsoft Teams channel, a Slack channel, or Amazon Chime webhook to work with Amazon Simple Notification Service (Amazon SNS) topics for forwarding notifications to chat rooms. When you create the first resource, Amazon Q Developer in chat channels automatically creates the IAM service-linked role, which can be seen in the IAM console. You don't need to manually create or configure this role. +When you configure Amazon Q Developer in chat applications for the first time, you configure a Microsoft Teams channel, a Slack channel, or Amazon Chime webhook to work with Amazon Simple Notification Service (Amazon SNS) topics for forwarding notifications to chat rooms. When you create the first resource, Amazon Q Developer in chat applications automatically creates the IAM service-linked role, which can be seen in the IAM console. You don't need to manually create or configure this role. @@ -82 +89 @@ Under specific circumstances, you can manually delete the **AWSServiceRoleForAWS -To delete the Amazon Q Developer in chat channels service-linked role, you must delete all Amazon Q Developer in chat channels resources in your AWS account, including all Slack channels and Amazon Chime webhooks. You can delete all Amazon Q Developer in chat channels resources using the Amazon Q Developer in chat applications console, and then use the IAM console or AWS Command Line Interface (AWS CLI) to delete the service-linked role. +To delete the Amazon Q Developer in chat applications service-linked role, you must delete all Amazon Q Developer in chat applications resources in your AWS account, including all Slack channels and Amazon Chime webhooks. You can delete all Amazon Q Developer in chat applications resources using the Amazon Q Developer in chat applications console, and then use the IAM console or AWS Command Line Interface (AWS CLI) to delete the service-linked role. @@ -88 +95 @@ If Amazon Q Developer is using the **AWSServiceRoleForAWSChatbot** service-linke -###### To delete Amazon Q Developer in chat channels resources +###### To delete Amazon Q Developer in chat applications resources @@ -114 +121 @@ If Amazon Q Developer is using the **AWSServiceRoleForAWSChatbot** service-linke -If you delete the Amazon Q Developer in chat channels service-linked role, and then need to use it again, simply open the Amazon Q Developer in chat applications console and create a new Slack channel or Amazon Chime webhook resource to recreate the role in your account. When you create the first new resource in Amazon Q Developer, it creates the service-linked role for you again. +If you delete the Amazon Q Developer in chat applications service-linked role, and then need to use it again, simply open the Amazon Q Developer in chat applications console and create a new Slack channel or Amazon Chime webhook resource to recreate the role in your account. When you create the first new resource in Amazon Q Developer, it creates the service-linked role for you again.