AWS amazonq documentation change
Summary
Added detailed documentation for adding and removing Microsoft Teams integration, including console steps, permissions management, and app installation procedures
Security assessment
The changes document security-related configuration steps including IAM role management, service access authorization, and admin consent requirements for permissions. However, there is no evidence of addressing a specific vulnerability or security incident.
Diff
diff --git a/amazonq/latest/qbusiness-ug/msteams-configuration.md b/amazonq/latest/qbusiness-ug/msteams-configuration.md index d9ac873c3..3555c276e 100644 --- a//amazonq/latest/qbusiness-ug/msteams-configuration.md +++ b//amazonq/latest/qbusiness-ug/msteams-configuration.md @@ -5 +5 @@ -Prerequisites +PrerequisitesAdding Teams IntegrationRemoving Teams Integration @@ -32 +32 @@ Prerequisites - * [Adding an Amazon Q Business integration for Microsoft Teams](./msteams-adding.html) + * Adding an Amazon Q Business integration for Microsoft Teams @@ -34 +34 @@ Prerequisites - * [Removing Microsoft Teams as an integration](./msteams-removing.html) + * Removing Microsoft Teams as an integration @@ -61,0 +62,117 @@ As admins, before you can add the Amazon Q Business integration to your Microsof +## Adding an Amazon Q Business integration for Microsoft Teams + +To use the Amazon Q Business Teams integration, you must allow it to connect to your Amazon Q Business application environment and web experience. To do this, admins can use the Amazon Q Business console, API, SDK, or AWS CLI. + +###### Note + +This integration can only be added using the AWS Management Console at this time. + +###### Topics + + * Using the console + + * Installing the Amazon Q Business app in your Microsoft Teams organization + + + + +### Using the console + + 1. Sign in to the Amazon Q console. + + 2. Choose **Applications** , then select the name of your application environment from the list. + + 3. Choose **Integrations** under **Enhancements**. + + 4. Choose **Add integration** from the **Integrations** section on the main page. + + 5. Choose **Microsoft Teams** as your integration. + + 6. On the **Add Teams integration page** , enter the **Name** of your integration. This is the display name for the integration resource in AWS. + + 7. Add a **description** (optional). + + 8. Enter your **Teams Tenant ID**. This can be found in the _Microsoft Entra Admin Center_. For more information, see [How to find your tenant ID - Microsoft Entra](https://learn.microsoft.com/en-us/entra/fundamentals/how-to-find-tenant) + + 9. Choose the type of **Service access** method that you want the Teams integration to use as authorization while accessing your service. You can **Create a new service role** or **Use an existing service role**. For more information, see [IAM role for allowing the integration to call Amazon Q Business on your end user's behalf](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/amazon-q-business-integrations-iam-allow-integration-access.html). + + 10. Choose the **Access management access** for the Teams integration to authorize to connect to IAM Identity center. For more information, see [IAM role for allowing Amazon Q Business to monitor the resources that the integration creates in your account](https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/amazon-q-business-integrations-iam-allow-qbusiness-monitor.html). + + 11. Optionally, add any **Tags** that are relevant for this Teams integration. + + 12. Choose **Add integration**. + + 13. Once the integration has been successfully created, you will move to the **Integration details page**. + + 14. Choose **Deploy integration**. + + 15. Choose **Access Teams**. + +###### Note + +This link will take you to the Teams domain outside of AWS. + + 16. You will continue this procedure within the Teams domain. + + + + +### Installing the Amazon Q Business app in your Microsoft Teams organization + +The following instructions show how to install the Amazon Q Business App in your Microsoft Teams (Teams) workspace using a link from the Amazon Q console as shown in the previous topic. + +###### Note + + * Only a Teams _Global Admin_ or someone with administrative permissions can add the Amazon Q Business App to your Teams organization, specifically `AppCatalog.ReadWrite.All`. + + * There can be only one instance of the Amazon Q App per Teams organization. That instance will be connected to the application environment that the Teams integration was configured with in the previous topic. + + + + + 1. Open the link and login as Global Admin or or someone with administrative permissions can add the Amazon Q Business App to the Microsoft Teams admin center for your organization. + + 2. Choose **Teams apps** in the left navigation. + + 3. Choose **Amazon Q Business** from the list of available apps. + + 4. Review and grant admin consent by choosing the **Permissions** tab and reviewing the permissions and choose **Grant admin consent**. + +###### Note + +If permissions are already granted, proceed to the end of the procedure, there is no further action required. + + 5. Authenticate and choose **Accept** for Amazon Q Business app. + + 6. Confirm that an app titled **Amazon Q Business Permissions** tab now says **Admin consent granted for all required permissions**. + + + + +All users assigned to the app from the **Teams admin center** can now find the app in the **Built for your org** section of the **Apps** page of their Teams app. + +## Removing Microsoft Teams as an integration + +To remove the Microsoft Teams (Teams) integration, admin users can use the Amazon Q Business console. + +###### Note + +This integration can only be removed using the AWS Management Console at this time. + +### Using the console + + 1. Sign in to the Amazon Q console. + + 2. Choose **Applications** , then select the name of your application environment from the list. + + 3. Choose **Integrations** under **Enhancements**. + + 4. Find and select your Teams integration from the **Integrations** section on the main page. + + 5. Choose **Delete** and confirm your choice. + + + + +Once you disable your Microsoft Teams (Teams) integration, your users will no longer be able to login. However you will still need to take steps to uninstall the Amazon Q Business App in your Teams organization. + @@ -68 +185 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Teams +Microsoft Teams @@ -70 +187 @@ Teams -Adding Teams Integration +Using Teams App