AWS amazonq medium security documentation change
Summary
Clarified that IAM Identity Center start URLs are organization-specific in two locations
Security assessment
Emphasizing the organization-specific nature of start URLs helps prevent accidental exposure of credentials and reinforces access control boundaries, directly impacting authentication security.
Diff
diff --git a/amazonq/latest/qdeveloper-ug/manage-account-details.md b/amazonq/latest/qdeveloper-ug/manage-account-details.md index a6f7d5686..5435582c6 100644 --- a//amazonq/latest/qdeveloper-ug/manage-account-details.md +++ b//amazonq/latest/qdeveloper-ug/manage-account-details.md @@ -11 +11 @@ This section does not apply to personal accounts (Builder IDs). -If you're an administrator who has subscribed a set of IAM Identity Center workforce users to the Pro tier, those users will need to sign in to Amazon Q in their IDE or at the command line using your IAM Identity Center's Start URL and Region. If you need to provide this URL to your users, you can find it in the Amazon Q Developer console, on the **Settings** page. +If you're an administrator who has subscribed a set of IAM Identity Center workforce users to the Pro tier, those users will need to sign in to Amazon Q in their IDE or at the command line using your IAM Identity Center's Start URL and Region. If you need to provide this URL to your users, you can find it in the Amazon Q Developer console, on the **Settings** page. The start URL is specific to your organization. @@ -23 +23 @@ To use the Amazon Q Developer console, you must have the permissions defined in -The start URL is shown in **Start URL** near the top of the page. +The start URL is shown in **Start URL** near the top of the page. The start URL is specific to your organization.