AWS singlesignon documentation change
Summary
Updated documentation for configuring extended session durations for Amazon Q Developer
Security assessment
The changes clarify how to manage session duration settings, which is a security control, but do not address a specific security vulnerability. Extended sessions may impact security posture by increasing exposure risks.
Diff
diff --git a/singlesignon/latest/userguide/90-day-extended-session-duration.md b/singlesignon/latest/userguide/90-day-extended-session-duration.md index 1ff362aff..1028a82ee 100644 --- a//singlesignon/latest/userguide/90-day-extended-session-duration.md +++ b//singlesignon/latest/userguide/90-day-extended-session-duration.md @@ -5 +5 @@ -# How to extend the session duration for Amazon Q Developer +# Extended sessions for Amazon Q Developer @@ -7 +7 @@ -If your developers use Amazon Q Developer as part of an integrated development environment (IDE), you can set the session duration for Amazon Q Developer to 90 days. Depending on when you enabled IAM Identity Center, extended session duration for Amazon Q Developer might be enabled by default. This extended session doesn’t affect the session duration of the AWS access portal or other IAM Identity Center integrated applications. +If your developers use Amazon Q Developer as part of an integrated development environment (IDE), you can set the session duration for Amazon Q Developer to 90 days. Depending on when you enabled IAM Identity Center, extended session duration for Amazon Q Developer might be enabled by default. This extended session doesn't affect the session duration of the AWS access portal or other AWS managed applications. @@ -11 +11 @@ If your developers use Amazon Q Developer as part of an integrated development e -Amazon Q Developer is accessible from consoles set to commercial AWS Regions that are enabled by default. If your IAM Identity Center instance is located in a Region where Amazon Q Developer isn’t currently accessible, enabling 90 day extended session duration won’t override the default setting. This means that your session duration remains unchanged, regardless of whether you enable 90 day extended session duration or not. For information, see [Supported Regions for Amazon Q Developer](https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/regions.html). +Amazon Q Developer is accessible from consoles set to commercial AWS Regions that are enabled by default. If your IAM Identity Center instance is located in a Region where Amazon Q Developer isn't currently accessible, enabling 90 day extended session duration will not override the default setting. This means that your session duration remains unchanged, regardless of whether you enable 90 day extended session duration or not. For information, see Supported Regions for Amazon Q Developer. @@ -13 +13 @@ Amazon Q Developer is accessible from consoles set to commercial AWS Regions tha -###### Enable or disable 90 day extended session duration for Amazon Q Developer. +###### To extend a session for Amazon Q Developer @@ -15 +15 @@ Amazon Q Developer is accessible from consoles set to commercial AWS Regions tha - 1. Open the [IAM Identity Center console](https://console.aws.amazon.com/singlesignon). + 1. Open the IAM Identity Center console. @@ -21 +21 @@ Amazon Q Developer is accessible from consoles set to commercial AWS Regions tha - 4. Under **Authentication** , next to **Session settings** , choose **Configure**. A **Configure session settings** dialog box appears. + 4. Under **Authentication** , next to **Session duration** , choose **Configure**. A **Configure session duration** dialog box appears. @@ -23 +23 @@ Amazon Q Developer is accessible from consoles set to commercial AWS Regions tha - 5. In the **Configure session settings** dialog box, select the checkbox for **Enable extended sessions for Amazon Q Developer**. Deselect the checkbox to disable extended session duration. + 5. In the **Configure session duration** dialog box, select the **Enable extended sessions for Amazon Q Developer** check box. Clear the check box to disable extended session sessions for Amazon Q Developer. @@ -36 +36 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -How to configure application session duration +User background sessions @@ -38 +38 @@ How to configure application session duration -Delete active sessions +End active sessions for workforce users