AWS quick high security documentation change
Summary
Added multiple documentation history entries covering new features, integrations, and updates from December 2025 to March 2026, including Google Drive integration, custom chat agents embedding, custom permissions updates, various integrations, security guidance, and regional support.
Security assessment
The change includes explicit security-related documentation: 1) 'Embedding and row-level security guidance' entry specifically mentions adding 'security guidance for embedded analytics to warn against AllowedEmbeddingDomains bypass vulnerabilities' - this directly addresses a security vulnerability (bypass vulnerability). 2) Multiple entries document security features including TLS 1.2 requirements, Amazon S3 ACL documentation, custom permissions, OAuth integrations, and VPC support. The 'AllowedEmbeddingDomains bypass vulnerabilities' reference provides concrete evidence of addressing a specific security vulnerability.
Diff
diff --git a/quick/latest/userguide/doc-history.md b/quick/latest/userguide/doc-history.md index c109e9477..b880357a8 100644 --- a//quick/latest/userguide/doc-history.md +++ b//quick/latest/userguide/doc-history.md @@ -20,0 +21,6 @@ Change| Description| Date +Google Drive integration| Refactored the Google Drive knowledge base integration documentation| March 20, 2026 +Embed custom chat agents| Added documentation for embedding custom chat agents on external websites, including the process for allowing hosting domains and generating embed code. For more information, see [Create, customize, and deploy AI-powered chat agents](https://docs.aws.amazon.com/quicksuite/latest/userguide/working-with-agents.html).| March 19, 2026 +Custom permissions update| Updated custom permissions documentation with new parent capabilities (Scenarios, Stories, Topics), new features (Edit Visual with AI, Build Calculation with AI, Create Executive Summary, Knowledge Base create/update and sharing), and an Action Connectors section documenting per-connector permissions. For more information, see [Custom permissions](https://docs.aws.amazon.com/quicksuite/latest/userguide/custom-permissions.html).| March 19, 2026 +Quick Automate actions update| Updated Amazon Quick Automate documentation for the Data tables, Excel, Browser, Custom Agent, REST API, Code, and AWS Integrations action categories.| March 18, 2026 +Atlassian Jira Cloud integration| Added dedicated Atlassian Jira Cloud integration documentation with validated OAuth scopes and a complete actions table. For more information, see [Atlassian Jira Cloud integration](https://docs.aws.amazon.com/quicksuite/latest/userguide/jira-integration.html).| March 18, 2026 +Atlassian Confluence Cloud integration| Refactored the Atlassian Confluence Cloud integration documentation with shared Atlassian OAuth modules for a consistent setup experience.| March 17, 2026 @@ -21,0 +28,21 @@ Namespace isolation and administrative console clarification| Clarified the diff +MCP integration documentation| Rewrote the Model Context Protocol (MCP) integration topic with an MCP protocol overview, OAuth discovery flow documentation (RFC 9728), and shared Dynamic Client Registration (DCR) concepts. For more information, see [Model Context Protocol (MCP) integration](https://docs.aws.amazon.com/quicksuite/latest/userguide/mcp-integration.html).| March 16, 2026 +Web Crawler VPC support| Added VPC support, sitemap discovery, and JavaScript navigation troubleshooting to the web crawler integration documentation. For more information, see [Web Crawler integration](https://docs.aws.amazon.com/quicksuite/latest/userguide/web-crawler-integration.html).| March 13, 2026 +Managing shared folders custom permission| Added documentation for the managing shared folders custom permission. For more information, see [Custom permissions](https://docs.aws.amazon.com/quicksuite/latest/userguide/custom-permissions.html).| March 12, 2026 +Chat user preferences| Added a user preferences section to the chat documentation for managing display and notification preferences in Amazon Quick. For more information, see [Ask questions, explore data, and get insights with chat](https://docs.aws.amazon.com/quicksuite/latest/userguide/using-quick-chat.html).| March 11, 2026 +Microsoft 365 integration guides| Rewrote the Microsoft Outlook, SharePoint, and Teams integration guides with a consistent structure that includes full Microsoft Entra setup instructions, permission tables with descriptions, and correct OAuth scopes.| March 10, 2026 +Conversation retention period update| Updated the chat conversation retention period from 30 days to 90 days. For more information, see [Ask questions, explore data, and get insights with chat](https://docs.aws.amazon.com/quicksuite/latest/userguide/using-quick-chat.html).| March 5, 2026 +Amazon S3 ACL documentation| Added document-level access control list (ACL) documentation for the Amazon S3 integration and a best practices guide for managing ACLs in knowledge bases. For more information, see [Document-level ACLs](https://docs.aws.amazon.com/quicksuite/latest/userguide/s3-acl.html).| March 2, 2026 +Asia Pacific (Malaysia) Region support| Added the Asia Pacific (Malaysia) ap-southeast-5 Region to the list of supported Amazon Quick Sight Regions, including the API endpoint and IP address range. For more information, see [Supported Regions](https://docs.aws.amazon.com/quicksuite/latest/userguide/regions.html).| March 1, 2026 +Quick Flows vs Quick Automate comparison| Added a comparison section to the automations landing page to help users choose between Amazon Quick Flows and Amazon Quick Automate based on their workflow needs. For more information, see [Choosing between Quick Flows and Quick Automate](https://docs.aws.amazon.com/quicksuite/latest/userguide/flows-vs-automate.html).| February 27, 2026 +TLS 1.2 MySQL version requirement| Documented the requirement for MySQL version 5.7.28 or later to support TLS 1.2 connections for MySQL data sources.| February 26, 2026 +ApproveFlowShareRequests custom permission| Added the ApproveFlowShareRequests custom permission, which controls whether users can approve requests to share flows. For more information, see [Custom permissions](https://docs.aws.amazon.com/quicksuite/latest/userguide/custom-permissions.html).| February 26, 2026 +Space extracted text limits| Updated the extracted text limits for CSV and Excel files in spaces.| February 23, 2026 +Knowledge base file size limit increase| Increased the file size limit for standard text documents in knowledge bases from 50 MB to 500 MB.| February 16, 2026 +Automations usage metrics| Added a section for tracking Quick Flows, Quick Automate, and Amazon Quick Research usage hours in the usage metrics documentation.| February 6, 2026 +SPICE capacity updates| Updated SPICE capacity and dataset size documentation to reflect increased limits.| February 2, 2026 +Embedding and row-level security guidance| Added security guidance for embedded analytics to warn against AllowedEmbeddingDomains bypass vulnerabilities. Added guidance for using row-level security (RLS) in multi-tenant architectures.| January 27, 2026 +CSV and Excel file size limits| Updated the file size limits for CSV and Excel uploads to 10 MB.| January 27, 2026 +Extension access with Okta and IAM Identity Center| Updated extension setup instructions for Microsoft Word, Slack, and Teams to support Okta as an identity provider with IAM Identity Center. For more information, see [Extension access](https://docs.aws.amazon.com/quicksuite/latest/userguide/extension-access.html).| January 26, 2026 +AgentHours vended logs| Updated Quick vended logs documentation to include the AgentHours log type for tracking agent usage.| January 6, 2026 +New integrations and PagerDuty advance| Added individual integration pages for 10 new MCP-based services and PagerDuty advance integration. Updated the supported integrations table and action connector APIs. For more information, see [Model Context Protocol (MCP) integration](https://docs.aws.amazon.com/quicksuite/latest/userguide/mcp-integration.html).| January 5, 2026 +User-driven license upgrades| Added documentation for user-driven license upgrades, which allow end users to request license tier changes. For more information, see [User-driven license upgrades](https://docs.aws.amazon.com/quicksuite/latest/userguide/user-driven-upgrades.html).| December 29, 2025