AWS quick documentation change
Summary
Major restructuring of Google Drive integration documentation, removing detailed setup steps and focusing on two authentication methods (user-managed and admin-managed), with admin-managed setup highlighting built-in document-level access control (ACL) synchronization and permission verification.
Security assessment
The change adds explicit documentation about security features in admin-managed setup, specifically mentioning automatic ACL synchronization from Google Drive and permission verification at query time. However, there is no evidence this addresses a specific security vulnerability or incident - it appears to be a documentation reorganization and clarification of existing security capabilities.
Diff
diff --git a/quick/latest/userguide/google-drive-integration.md b/quick/latest/userguide/google-drive-integration.md index 2c83f491a..414f89fb6 100644 --- a//quick/latest/userguide/google-drive-integration.md +++ b//quick/latest/userguide/google-drive-integration.md @@ -5 +5 @@ -Google Drive capabilitiesBefore you beginAuthenticationSet up the knowledge base integrationSupported content typesAccess controlsManage knowledge basesManage and troubleshootLimitations +PrerequisitesSupported content types @@ -9 +9 @@ Google Drive capabilitiesBefore you beginAuthenticationSet up the knowledge base -Use the Google Drive knowledge base integration to index Google Drive content so that Amazon Quick agents can search and answer questions about it. +With the Google Drive knowledge base integration, you can index your Google Drive content. Your Amazon Quick agents can then search this content and answer questions about it. @@ -11 +11 @@ Use the Google Drive knowledge base integration to index Google Drive content so -## Google Drive capabilities +Amazon Quick supports two authentication methods for connecting to Google Drive: @@ -13 +13 @@ Use the Google Drive knowledge base integration to index Google Drive content so -With the Google Drive integration, you can ask questions about content stored in your Google Drive. For example, you can find key findings from Google Docs, presentation highlights from Google Slides, or specific information across multiple document types. Responses include contextual details such as publication dates, modification history, and document ownership. + * **User-managed setup** – You sign in to Google Drive directly to authorize the connection. This is the simplest way to get started. For more information, see [User-managed setup](./google-drive-kb-user-managed.html). @@ -15 +15 @@ With the Google Drive integration, you can ask questions about content stored in -###### Note + * **Admin-managed setup (service credentials)** – A Google Workspace administrator creates a service account with domain-wide delegation to authorize the connection. A key benefit of admin-managed setup is built-in document-level access control (ACL). Amazon Quick automatically syncs access control lists from Google Drive. It verifies each user's permissions at query time, so users see answers only from documents that they are authorized to access. For more information, see [Admin-managed Google Drive knowledge base setup](./google-drive-kb-admin-managed.html). @@ -17 +16,0 @@ With the Google Drive integration, you can ask questions about content stored in -Google Drive integration supports data ingestion only. It does not provide action capabilities for managing Google Drive files through APIs. @@ -19 +17,0 @@ Google Drive integration supports data ingestion only. It does not provide actio -## Before you begin @@ -21 +18,0 @@ Google Drive integration supports data ingestion only. It does not provide actio -Make sure you have the following before you set up the integration. @@ -23,61 +20 @@ Make sure you have the following before you set up the integration. - * A Google account with Google Drive access. - - * Google Drive files and folders to index. - - * For subscription requirements, see [Set up integrations in the console](./integration-console-setup-process.html). - - - - -## Authentication - -For knowledge base integrations, Amazon Quick handles authentication through a popup flow during setup. Google Drive integration uses managed three-legged OAuth (3LO) authentication. - - 1. Complete the Google sign-in popup that appears. - - 2. Review the permissions that Amazon Quick is requesting. - - 3. Select both permissions and choose **Continue** to grant access and complete the authentication process. - - - - -### Permissions granted during consent - -When you authorize the connection, Amazon Quick requests the following permissions from your Google account: - -See and download all your Google Drive files - - - * See your Google Drive files - - * Download your files - - * See the names and emails of people you share files with - - - - -See information about your Google Drive files - - - * The titles and descriptions of your files - - * The names and email addresses of people you share files with - - * Your folders and how files are organized - - - - -###### Note - -You can review and remove this access at any time from your Google Account permissions settings. - -## Set up the knowledge base integration - - 1. In the Amazon Quick console, in the navigation pane under **Connect apps and data** , choose **Integrations**. - - 2. Choose the **Knowledge bases** tab. - - 3. Under **Set up new knowledge base** , find **Google Drive** and choose the **Add** (+) icon. +After you connect, Amazon Quick indexes your Google Drive files and folders into a knowledge base. Your Amazon Quick agents can then search this content and generate answers that are grounded in your Google Drive data. @@ -85 +22 @@ You can review and remove this access at any time from your Google Account permi - 4. In the **Create Google Drive knowledge base** dialog, under **Connected account** , select an existing Google Drive connection or choose **\+ Add account** to connect a new Google account. If you add a new account, complete the Google sign-in and consent flow. +## Prerequisites @@ -87 +24 @@ You can review and remove this access at any time from your Google Account permi - 5. Under **Create knowledge base** , enter a name and an optional description for your knowledge base. +Before you set up the Google Drive integration, make sure that you have the following: @@ -89,13 +26 @@ You can review and remove this access at any time from your Google Account permi - 6. In the **Content** section, choose **Add content** to select the Google Drive files and folders to index. - - 7. In the **Add files or folders** dialog, browse your Google Drive content using the following tabs: - - * **My Drive** – Files and folders from your personal drive. - - * **Shared with me** – Files and folders that others have shared with you. - - * **Shared drives** – Files and folders from shared drives in your organization. - - 8. Select the files or folders to include and choose **Select**. - - 9. Review the selected content in the **Content** table. To remove an item, choose the delete icon in the **Actions** column. + * A Google account with Google Drive access. @@ -103 +28 @@ You can review and remove this access at any time from your Google Account permi - 10. Choose **Create**. + * For subscription requirements, see [Set up integrations in the console](./integration-console-setup-process.html). @@ -108 +33 @@ You can review and remove this access at any time from your Google Account permi -After you choose **Create** , the data sync starts automatically. +For admin-managed setup, additional prerequisites apply. For more information, see [Admin-managed Google Drive knowledge base setup](./google-drive-kb-admin-managed.html). @@ -112,18 +37 @@ After you choose **Create** , the data sync starts automatically. -In addition to the common file types supported across all knowledge base integrations, the Google Drive connector supports the following Google Workspace-specific formats: - - * **Google Workspace files:** Google Docs, Google Sheets, Google Slides - - - - -For more information about supported file types, size limits, and content processing options, see [Common configuration settings](./knowledge-base-integrations.html#common-configuration-settings). - -## Access controls - -###### Important - -Amazon Quick does not sync access control lists (ACLs) from data sources. When you create a knowledge base in Amazon Quick, by default, only you can get insights from the knowledge base. To share content, update the knowledge base permissions to provide access to different users and groups. - -## Manage knowledge bases - -After you set up your Google Drive integration, you can manage your knowledge bases. +The Google Drive connector supports all of the common file types that Amazon Quick knowledge bases support. These include PDF, Word, Excel, PowerPoint, and text files. The connector also supports the following Google Workspace-specific formats: @@ -131 +39 @@ After you set up your Google Drive integration, you can manage your knowledge ba -### Edit existing knowledge bases + * Google Docs @@ -133 +41 @@ After you set up your Google Drive integration, you can manage your knowledge ba - 1. In the Amazon Quick console, choose **Knowledge bases**. + * Google Sheets @@ -135 +43 @@ After you set up your Google Drive integration, you can manage your knowledge ba - 2. Select your Google Drive knowledge base from the list. + * Google Slides @@ -137,31 +44,0 @@ After you set up your Google Drive integration, you can manage your knowledge ba - 3. Choose the three-dot icon under **Actions** , then choose **Edit knowledge base**. - - 4. Update your configuration settings as needed and choose **Save**. - - - - -## Manage and troubleshoot - -For instructions on editing, sharing, or deleting your integration, see [Managing existing integrations](./integration-workflows.html#managing-existing-integrations). - -For more information about knowledge base troubleshooting, including sync issues and missing documents, see [Troubleshooting knowledge bases](./troubleshooting-knowledge-bases.html). - -### Google Drive-specific issues - - * **Authentication popup fails** – Verify that your browser allows popups from the Amazon Quick console domain. Try using a different browser or clearing your browser cache. - - * **Permissions revoked** – If you previously revoked Amazon Quick access from your Google Account permissions settings, you need to re-authenticate by editing the integration and signing in again. - - * **Missing content** – Verify that the Google account that you used for authentication has access to the files and folders you selected. Content that was shared with you after the initial sync requires a resync to be indexed. - - * **Google API rate limiting** – Google Drive might throttle requests during high usage periods. If syncs fail or are incomplete, retry during off-peak hours. - - - - -## Limitations - -When using Google Drive integrations in Amazon Quick, be aware of the following limitations: - - * File comments synchronization is not supported. @@ -170,0 +48 @@ When using Google Drive integrations in Amazon Quick, be aware of the following +For more information about supported file types, size limits, and content processing options, see [Common configuration settings](./knowledge-base-integrations.html#common-configuration-settings). @@ -180 +58 @@ GitHub integration -HubSpot integration +User-managed setup