AWS amazonq documentation change
Summary
Rewrote prerequisites to focus on Google Workspace authentication setup and permissions configuration
Security assessment
The revised documentation emphasizes secure authentication setup and access control configuration, which are security best practices. However, this appears to be a clarification of requirements rather than addressing a specific security vulnerability.
Diff
diff --git a/amazonq/latest/qbusiness-ug/gmail-prereqs.md b/amazonq/latest/qbusiness-ug/gmail-prereqs.md index db44ab5a1..ce56386c5 100644 --- a//amazonq/latest/qbusiness-ug/gmail-prereqs.md +++ b//amazonq/latest/qbusiness-ug/gmail-prereqs.md @@ -7,22 +7 @@ -Before you begin, make sure that you have completed the following prerequisites. - -**In Gmail, make sure you:** - - * Are using Google Workspace. - - * Have created a Google Cloud Platform admin account and a Google Cloud project. - - * Activated the Gmail API and Admin SDK API in your admin account. - - * Created a service account and downloaded a JSON private key for your Gmail. For information about how to create and access your private key, see [Create a service account key](https://cloud.google.com/iam/docs/keys-create-delete#creating) and [Service account credentials](https://cloud.google.com/iam/docs/service-account-creds#key-types) on the Google Cloud website. - - * Copied your admin account email, your service account email, and your private key to use for authentication. - - * Added the following Oauth scopes (using an admin role) for your user and the shared directories you want to index: - - * https://www.googleapis.com/auth/admin.directory.user.readonly - - * https://www.googleapis.com/auth/gmail.readonly - - - +Before you connect Amazon Q Business to Gmail, you need to set up authentication and permissions in your Google Workspace environment. This setup ensures Amazon Q Business can securely access your email data while respecting your organization's access controls. @@ -57 +36 @@ Overview -Using the console +Setting up Google Workspace authentication