AWS quicksuite medium security documentation change
Summary
Added implementation-specific limitations, access control notes, and quota details
Security assessment
Added explicit note about dual access configuration requirements in IDC implementations ('admin must configure user access in both consoles'). This addresses a potential misconfiguration risk where users might gain unintended access through a single console.
Diff
diff --git a/quicksuite/latest/userguide/qbiz-indexes-limitations.md b/quicksuite/latest/userguide/qbiz-indexes-limitations.md index 557d53775..ac6e545c0 100644 --- a//quicksuite/latest/userguide/qbiz-indexes-limitations.md +++ b//quicksuite/latest/userguide/qbiz-indexes-limitations.md @@ -4,0 +5,2 @@ +General LimitationsIDC Implementation LimitationsIndex Quotas + @@ -6,0 +9,4 @@ +###### Note + +In an IDC implementation, when a Amazon Q Business knowledge base is first created in Amazon Quick Suite, access to the knowledge base is automatically granted to users with access to the selected Amazon Q Business index. For additional users to have access to a knowledge base, the admin must configure user access in both the Amazon Q Business console and Amazon Quick Suite knowledge base permissions pages. + @@ -9 +15 @@ When using Amazon Q Business indexes in Amazon Quick Suite, be aware of the foll - * You can connect up to 2 Amazon Q Business indexes to Amazon Quick Suite in the current release. +## General Limitations @@ -13,3 +19 @@ When using Amazon Q Business indexes in Amazon Quick Suite, be aware of the foll - * Amazon Q Business index knowledge bases are currently limited to text files and tabular data. - - * Amazon Q Business guardrails are not automatically applied in Amazon Quick Suite. You need to configure similar guardrails in Amazon Quick Suite separately. + * Amazon Q Business index knowledge bases only support the docs types supported by Amazon Q Business. @@ -19 +23,19 @@ When using Amazon Q Business indexes in Amazon Quick Suite, be aware of the foll - * Amazon Q Business indexes must be in the same AWS account and region as Amazon Quick Suite, and use the same instance of IAM Identity Center. + * Amazon Q Business indexes must be in the same AWS account and region as Amazon Quick Suite. + + + + +## IDC Implementation Limitations + + * Both Amazon Quick Suite and Amazon Q Business must use the same instance of IAM Identity Center. + + + + +## Index Quotas + + * You can connect up to two Amazon Q Business indexes per Region to Amazon Quick Suite in the current release. + + * This quota cannot be increased. + + * Once indexes are selected and saved in a Amazon Quick Suite instance, they cannot be directly unselected.