AWS quick documentation change
Summary
Restructured and simplified approval review documentation, clarified roles/permissions, updated workflow steps, and condensed state references
Security assessment
The changes enhance documentation about access controls (limiting reviews to Admin Pro/Author Pro roles) and approval processes, but there's no evidence of addressing a specific security vulnerability. The documentation now better explains existing security controls without indicating they were added to resolve a vulnerability.
Diff
diff --git a/quick/latest/userguide/approval-review.md b/quick/latest/userguide/approval-review.md index 0f9755de2..d6c17f2e3 100644 --- a//quick/latest/userguide/approval-review.md +++ b//quick/latest/userguide/approval-review.md @@ -5 +5 @@ -How approvals workEnabling and disabling approval reviewWorking with approval reviews - step by stepApproval review states reference +How approvals workWho can review flowsSubmitting a flow for approvalEnabling and disabling approval reviewApproval states reference @@ -9,3 +9 @@ How approvals workEnabling and disabling approval reviewWorking with approval re -Approval reviews provide administrators with governance control over how flows are shared within your organization. When approval review is enabled, all users must submit their flows for review and approval before they can be shared with others. This helps prevent flow sprawl, ensures quality control, and maintains oversight of what flows are available to your users. - -Think of approval reviews as a quality gate - it allows your organization to review flows before they become available to everyone, ensuring that only appropriate, well-designed flows are shared broadly. +When approval review is enabled, users must submit their flows for review before they can be shared. This gives administrators oversight of what flows are available in the organization. @@ -15,38 +13 @@ Think of approval reviews as a quality gate - it allows your organization to rev -Your organization's administrators decide whether to enable approval review. Once enabled, it applies to all flows submitted for sharing, requiring an approval before any other users see them in their library. - -### If your organization uses approval reviews - -When approval reviews are enabled, you'll work with a three-stage approval cycle: - -📝 Submitted - - -**What it means:** Your flow has been submitted for review and is waiting for approval - -**What you can do:** - - * View the submitted flow (but cannot edit it) - - * Check the approval status - - * Add comments about what changes were made - - * Withdraw the request if needed - - * Wait for reviewer feedback - - - - -❌ Rejected - - -**What it means:** Your flow was reviewed but not approved for sharing - -**What you can do:** - - * See the reason for rejection (if provided by the reviewer) - - * Make necessary changes to address feedback - - * Resubmit the updated flow for approval +When approval review is enabled, sharing a flow follows a three-stage cycle: @@ -54 +15 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle - * View rejection comments from the reviewer + * **Submitted** — The flow is waiting for review. You can view it and check the status, but cannot edit it. You can withdraw the request if needed. @@ -55,0 +17 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle + * **Rejected** — The flow was not approved. You can view the reviewer's feedback, update your draft, and resubmit. @@ -56,0 +19 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle + * **Approved** — The flow is shared with your intended audience. Any future changes require a new approval cycle. @@ -59 +21,0 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle -✅ Approved @@ -62 +24 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle -**What it means:** Your flow has been approved and is now shared with your intended audience +## Who can review flows @@ -64 +26 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle -**What you can do:** +Users with Amazon Quick Enterprise subscriptions (Author Pro or Admin Pro roles) can review and approve flows. Users with Amazon Quick Professional subscriptions cannot review flows. @@ -66 +28 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle - * See your flow available to users +Reviewers can: @@ -68 +30 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle - * View approval details and who approved it + * View all submitted flows in the **Pending approval** tab @@ -70 +32 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle - * Make new changes (which will require a new approval cycle) + * Approve or reject flows individually or in bulk @@ -71,0 +34 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle + * Provide feedback when rejecting a flow @@ -75 +37,0 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle -### Admin Pro and Author Pro view in the library @@ -77 +39 @@ When approval reviews are enabled, you'll work with a three-stage approval cycle -Administrators and Author Pro users have special access to manage the approval process: +## Submitting a flow for approval @@ -79 +41 @@ Administrators and Author Pro users have special access to manage the approval p -###### Note + 1. Complete and test your flow. @@ -81 +43 @@ Administrators and Author Pro users have special access to manage the approval p -This review ability is not provided to users with promotional Enterprise access (Authors). Only users with full Admin Pro or Author Pro subscriptions can review and approve flows. + 2. Choose **Share** and specify who should have access. @@ -83 +45 @@ This review ability is not provided to users with promotional Enterprise access -#### Review flows tab + 3. Choose **Submit for review**. @@ -85 +47 @@ This review ability is not provided to users with promotional Enterprise access -**Purpose:** Central location to review all submitted flows + 4. Monitor the approval status in the **Pending approval** tab. @@ -87,22 +48,0 @@ This review ability is not provided to users with promotional Enterprise access -**What you can see:** - - * All flows submitted for approval - - * Flow details and what changes were made - - * Comments from flow creators about their changes - - * Approval history and status - - - - -#### Approval actions - - * **Approve flows:** Accept flows for sharing with intended audiences - - * **Reject flows:** Decline flows with optional feedback for improvement - - * **Bulk actions:** Approve or reject multiple flows at once - - * **View details:** See what specific changes were made or who is being added @@ -111,0 +52 @@ This review ability is not provided to users with promotional Enterprise access +If your flow is rejected, review the feedback, update your draft, and resubmit. @@ -115,94 +56 @@ This review ability is not provided to users with promotional Enterprise access -Administrators have full control over when approval review is active in your organization. - -### Enabling approval review - -When administrators enable approval review: - - * All future Flow sharing requires approval - - * Existing shared flows remain accessible - - * Users can still create and edit flows in draft mode - - * Only Admin Pro and Author Pro users can approve flows - - - - -### Disabling approval review - -When administrators disable approval review: - - * All pending approval requests are automatically rejected - - * Users can immediately share flows without approval - - * Previously approved flows remain shared - - * The approval process is bypassed for all future sharing - - - - -### Configuration options - -Administrators can configure approval review to require approval for: - - * Sharing with individuals - - * Sharing with groups - - * Sharing with everyone in the organization - - * Publishing changes to existing shared flows - - * Adding new users to existing flows - - - - -## Working with approval reviews - step by step - -Understanding the approval process helps you navigate it efficiently and get your flows approved quickly. - -### For flow creators - -#### Submitting for approval - - * **Complete your flow** \- Ensure it's fully built and tested - - * **Add sharing details** \- Specify who should have access - - * **Include change notes** \- Explain what you built or changed - - * **Submit for review** \- Send to the approval queue - - * **Monitor status** \- Check for updates and feedback - - - - -#### If your flow is rejected - - * **Review feedback** \- Read the reviewer's comments carefully - - * **Make necessary changes** \- Address the specific concerns raised - - * **Test your updates** \- Ensure changes work as expected - - * **Resubmit with notes** \- Explain how you addressed the feedback