AWS amazonq documentation change
Summary
Updated console references from 'Amazon Q Developer console' to 'Amazon Q console', added multi-console support instructions, and reworked subscription visibility configuration steps
Security assessment
Clarifies access control documentation by specifying console differences and permission requirements for organizational visibility. While related to security practices, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/subscribe-visibility.md b/amazonq/latest/qdeveloper-ug/subscribe-visibility.md index 38746ebb1..a3c41b72d 100644 --- a//amazonq/latest/qdeveloper-ug/subscribe-visibility.md +++ b//amazonq/latest/qdeveloper-ug/subscribe-visibility.md @@ -11,3 +11 @@ This section does not apply to personal accounts (Builder IDs). -If you are a management account administrator within an organization managed by [AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html), you can configure Amazon Q to display Amazon Q Developer Pro subscriptions from both _management_ and _member_ accounts in a single, unified list on the **Subscriptions** page of the Amazon Q Developer console while signed in to your management account. This organization-wide visibility eliminates the need to sign in to multiple accounts to track your subscriptions. - -When organization-wide visibility is enabled, IAM Identity Center workforce users and groups subscribed in member accounts will appear as read-only with a greyed-out selector next to them, indicating that you cannot take action on them as a management account administrator. If you need to modify these users and groups, you must sign in to the member account that manages them. +If you are a management account administrator within an organization managed by [AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html), you can configure Amazon Q to display Amazon Q Developer Pro subscriptions from both _management_ and _member_ accounts in a single, unified list on the **Subscriptions** page of the Amazon Q console (_not_ the Amazon Q Developer console) while signed in to your management account. This organization-wide visibility eliminates the need to sign in to multiple accounts to track your subscriptions. @@ -35 +33 @@ Before you begin, make sure that: - * You have an _organization instance_ of IAM Identity Center set up in your management account and connected to Amazon Q. To check, sign in to your management account, go to the Amazon Q console, choose **Settings** , and make sure the following message appears at the top: **Amazon Q connected to an organization instance of IAM Identity Center**. + * You have an _organization instance_ of IAM Identity Center set up in your management account and connected to Amazon Q Developer. @@ -39 +37 @@ Before you begin, make sure that: - * You have the minimum permissions required to perform actions in the Amazon Q console. For more information, see [Allow administrators to use the Amazon Q console](./id-based-policy-examples-admins.html#q-admin-setup-admin-users-sub) . + * You have the minimum permissions required to perform actions in the Amazon Q or Amazon Q Developer console (you can use either console to enable trusted access). For more information, see [Allow administrators to use the Amazon Q console](./id-based-policy-examples-admins.html#q-admin-setup-admin-users-sub) and [Allow administrators to use the Amazon Q Developer console](./id-based-policy-examples-admins.html#q-admin-setup-admin-users). @@ -48 +46,11 @@ Before you begin, make sure that: - 2. Switch to the Amazon Q Developer console. + 2. Do one of the following depending on the console you want to use: + + * Switch to the Amazon Q console. + +Choose **Subscriptions**. + +At the bottom of the page, in the **Subscription view settings** section, choose **Edit**. + +Choose **On**. + + * Switch to the Amazon Q Developer console. @@ -50 +58 @@ Before you begin, make sure that: - 3. Choose **Settings**. +Choose **Settings**. @@ -52 +60 @@ Before you begin, make sure that: - 4. In **Subscription view settings** , choose **Edit**. +In the **Subscription view settings** section, choose **Edit**. @@ -54 +62 @@ Before you begin, make sure that: - 5. Enable the toggle. +Enable the toggle. @@ -56 +64 @@ Before you begin, make sure that: - 6. Choose **Save**. + 3. Choose **Save**. @@ -58 +66 @@ Before you begin, make sure that: -Trusted access to Amazon Q is now enabled. Users and groups who are subscribed in member accounts now appear in the Amazon Q Developer console when you're signed in as a management account administrator. +Trusted access to Amazon Q is now enabled. Users and groups who are subscribed in member accounts now appear in the Amazon Q console (not the Amazon Q Developer console) when you're signed in as a management account administrator.