AWS amazonq medium security documentation change
Summary
Updated documentation to differentiate between new and legacy Gmail connectors, added version-specific information about ACL behavior and field mapping availability
Security assessment
Added explicit documentation about ACL behavior differences between connector versions. The new connector enforces mandatory ACL and identity crawling without configuration options, which impacts security controls. This change documents security-related access control behavior that could prevent misconfigurations.
Diff
diff --git a/amazonq/latest/qbusiness-ug/gmail-connector.md b/amazonq/latest/qbusiness-ug/gmail-connector.md index bda1e02ff..631c979ed 100644 --- a//amazonq/latest/qbusiness-ug/gmail-connector.md +++ b//amazonq/latest/qbusiness-ug/gmail-connector.md @@ -7 +7,3 @@ -Gmail is an email client developed by Google through which you can send email messages with file attachments. Gmail messages can be sorted and stored inside your email inbox using folders and labels. You can connect Gmail instance to Amazon Q Business—using either the AWS Management Console or the [CreateDataSource](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_CreateDataSource.html) API—and create an Amazon Q web experience. +With Amazon Q Business, you can connect your Gmail enterprise email system to unlock valuable organizational knowledge stored in email communications. When you connect Gmail to Amazon Q Business, your users can search and get answers from email content and conversations directly through the Amazon Q web experience. + +You can connect your Gmail instance to Amazon Q Business using either the AWS Management Console or the [CreateDataSource](https://docs.aws.amazon.com/amazonq/latest/api-reference/API_CreateDataSource.html) API. This connection enables your organization to leverage email-based knowledge for improved decision-making and faster information discovery. @@ -10,0 +13,2 @@ Gmail is an email client developed by Google through which you can send email me + * [Gmail connector versions](./gmail-versions.html) + @@ -15 +19,5 @@ Gmail is an email client developed by Google through which you can send email me - * [Connecting Amazon Q Business to Gmail using the console](./gmail-console.html) + * [Connecting Amazon Q Business to Gmail using the latest connector (Console)](./gmail-console-new.html) + + * [Connecting Amazon Q Business to Gmail using the legacy connector (Console)](./gmail-console-original.html) + + * [Connecting Amazon Q Business to Gmail using the new connector (API)](./gmail-new-api.html) @@ -17 +25 @@ Gmail is an email client developed by Google through which you can send email me - * [Connecting Amazon Q Business to Gmail using APIs](./gmail-api.html) + * [Connecting Amazon Q Business to Gmail using the original connector (API)](./gmail-original-api.html) @@ -42,0 +51,15 @@ Gmail is an email client developed by Google through which you can send email me +###### Note + +**ACL behavior by connector version:** + + * **New connector:** ACL and identity crawling is automatically enabled and cannot be disabled. No manual configuration is required. + + * **Original connector:** ACL and identity crawling can be manually configured during setup. + + + + +###### Note + +**Original connector only:** Field mappings are only available when using the original Gmail connector. The new connector uses optimized default field mappings that cannot be customized. + @@ -51 +74 @@ IAM role -Overview +Connector versions