AWS Security ChangesHomeSearch

AWS amazonq documentation change

Service: amazonq · 2025-10-01 · Documentation medium

File: amazonq/latest/qbusiness-ug/gmail-overview.md

Summary

Restructured feature comparison table to differentiate between latest and legacy connectors, added CMK support for legacy connector, and updated security/access control details

Security assessment

Added documentation about Customer Managed Key (CMK) support for the legacy connector, which is a security feature. The comparison of ACL/identity crawling modes and VPC configurations also provides clearer security-related information, though no specific vulnerabilities are addressed.

Diff

diff --git a/amazonq/latest/qbusiness-ug/gmail-overview.md b/amazonq/latest/qbusiness-ug/gmail-overview.md
index 5d1220d75..9d42d074f 100644
--- a//amazonq/latest/qbusiness-ug/gmail-overview.md
+++ b//amazonq/latest/qbusiness-ug/gmail-overview.md
@@ -9,3 +9,3 @@ The following table gives an overview of the Gmail connector and its supported f
-Category | Feature | Support  
----|---|---  
-**Security** | **Authentication type** | Google Service Account  
+Category | Feature | Latest Connector | Legacy Connector  
+---|---|---|---  
+**Security** | **Authentication type** | Google Service Account | Google Service Account  
@@ -18,0 +19 @@ Category | Feature | Support
+|  **Google service account**
@@ -20,19 +21,4 @@ Category | Feature | Support
-**[Access Control List (ACL)](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-concepts.html#connector-authorization) crawling** | Yes. For more information, see [ACL crawling](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/gmail-user-management.html).   
-**[Identity crawling](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-concepts.html#connector-identity-crawler)** | No  
-**[VPC](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-concepts.html#connector-vpc)** | Yes  
-**Crawl features** | **Custom metadata** | No  
-**Entities** | Yes. The following entities are supported: 
-
-  * Messages
-  * Attachments
-
-See [What is a document?](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-doc-crawl.html) for more details on what each connector crawls as a document.  
-**[Field mappings](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-concepts.html#connector-field-mappings)** | Yes. Supports default field mappings. For more information, see [Field mappings](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/gmail-field-mappings.html).  
-**Filters** | Yes. The following filters are supported: 
-
-  * Include/ exclude message attachments
-  * Include content by date range.
-  * Include/exclude content by email from, to, cc, and bcc domains
-  * Include/exclude content by keywords in subjects
-  * Include/exclude content by label name
-  * Include/exclude content by file name and file type
+  * Google service account
+  * Admin account email
+  * Client email
+  * Private key
@@ -41,2 +27,9 @@ See [What is a document?](https://docs.aws.amazon.com/amazonq/latest/qbusiness-u
-**[Sync mode](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-concepts.html#connector-sync-mode)** | Supports full and incremental sync.  
-**[File types](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/doc-types.html)** | Supports all files supported by Amazon Q.   
+**[Access Control List (ACL)](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-concepts.html#connector-authorization) crawling** | Yes (Automatic) | Yes (Manual configuration)  
+**[Identity crawling](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-concepts.html#connector-identity-crawler)** | Yes (Automatic) | Yes (Manual configuration)  
+**[VPC](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-concepts.html#connector-vpc)** | No | Yes  
+| **Customer Managed Key (CMK) support** | No | Yes  
+**Crawl features** | **Custom metadata** | No | No  
+**Entities** | Messages (automatic), Draft emails (configurable) | Messages, Attachments (configurable)  
+**[Field mappings](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-concepts.html#connector-field-mappings)** | No (Uses optimized defaults) | Yes (Configurable)  
+**Filters** | No | Date range, Attachments (regex), Domains, Keywords, Labels  
+**[Sync mode](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/connector-concepts.html#connector-sync-mode)** | Sync mode | No (Optimized automatic sync) | Yes (Full and incremental sync)  
@@ -50 +43 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Gmail
+Connector versions