AWS quick documentation change
Summary
Added documentation for new Scenarios/Stories/Topic restrictions, clarified Flow sharing permissions, and introduced new sections for AI features, Knowledge Base controls, and Action Connector permissions
Security assessment
The changes primarily add documentation for new permission controls (AI features, Knowledge Base, Action Connectors) rather than addressing vulnerabilities. The Action Connector permissions (Create/Update/Share/Use actions) represent security documentation for access control features, but there's no evidence these changes address existing security issues.
Diff
diff --git a/quick/latest/userguide/create-custom-permissions-profile.md b/quick/latest/userguide/create-custom-permissions-profile.md index daffed993..8637ea9fa 100644 --- a//quick/latest/userguide/create-custom-permissions-profile.md +++ b//quick/latest/userguide/create-custom-permissions-profile.md @@ -5 +5 @@ -Quick parent capabilitiesQuick featuresCreating a custom permissions profile for a Amazon Quick account that is integrated with IAM Identity Center or Active DirectoryCreating a custom permissions profile for a Amazon Quick account that uses Amazon Quick managed usersApply a custom permissions profile to a roleApply a custom permissions profile to a userApply a custom permissions profile to an account +Quick parent capabilitiesQuick featuresAction connector featuresCreating a custom permissions profile for a Amazon Quick account that is integrated with IAM Identity Center or Active DirectoryCreating a custom permissions profile for a Amazon Quick account that uses Amazon Quick managed usersApply a custom permissions profile to a roleApply a custom permissions profile to a userApply a custom permissions profile to an account @@ -58,0 +59 @@ Research | Restricts all Research-related features +Scenarios | Restricts all Scenarios-related features @@ -59,0 +61,2 @@ Spaces | Restricts all Spaces-related features +Stories | Restricts all Stories-related features +Topics | Restricts all Topics-related features @@ -87 +90 @@ Enable UI agent to perform browser tasks | -Review and approve sharing requests of Flows | +All eligible users can review and approve Flows sharing requests | @@ -89 +92 @@ Review and approve sharing requests of Flows | - * Restricts users who can review and approve sharing requests of Flows + * Restricts which users can review and approve Flows sharing requests @@ -239,0 +243,40 @@ Creating or updating threshold alerts | +Edit Visual with AI | + + * Restricts the ability to edit visuals using AI-assisted suggestions + +| Analyses +Build Calculation with AI | + + * Restricts the ability to build calculations using AI-assisted suggestions + +| Analyses +Create Executive Summary | + + * Restricts the ability to create AI-generated executive summaries from dashboards + +| Dashboards +Creating or updating all knowledge bases | + + * Restricts the ability to create or update knowledge bases + +| Knowledge Base +Share all knowledge bases | + + * Restricts the ability to share knowledge bases + +| Knowledge Base + +## Action connector features + +In addition to the features listed in the preceding sections, you can restrict access to individual action connectors. Each action connector supports the following permissions: + + * **Create and Update action** – Restricts the ability to create or update actions for the connector. + + * **Share action** – Restricts the ability to share actions for the connector. + + * **Use action** – Restricts the ability to use actions for the connector. + + + + +These permissions are available on the **Action Connectors** tab of the custom permissions profile. For a list of available action connectors, see [Action connectors](https://docs.aws.amazon.com/quick/latest/userguide/action-integrations.html).