AWS quick documentation change
Summary
Updated data handling architecture description from 'local-first' to API-driven model, revised stored data types, and removed detailed storage table.
Security assessment
The changes clarify data processing occurs through API Gateway rather than locally, which impacts data transmission security but doesn't address a specific vulnerability. Removed details about locally stored data types (conversations, knowledge graphs) might reduce attack surface information, but no evidence of security incident remediation.
Diff
diff --git a/quick/latest/userguide/desktop-security.md b/quick/latest/userguide/desktop-security.md index 933742c83..be115ee20 100644 --- a//quick/latest/userguide/desktop-security.md +++ b//quick/latest/userguide/desktop-security.md @@ -7 +7 @@ -Local-first architectureData storageFolder permissionsSystem tool permissionsConnection securityPrivacy controlsClearing all data +How data is handledData storageFolder permissionsSystem tool permissionsConnection securityPrivacy controlsClearing all data @@ -11 +11 @@ Local-first architectureData storageFolder permissionsSystem tool permissionsCon -The Amazon Quick desktop application uses a local-first architecture designed to keep your data private while providing full access to AI capabilities. Your conversations, files, and personal context stay on your computer. The following sections describe how Amazon Quick on desktop handles security, privacy, and data storage. +The Amazon Quick desktop application is designed to keep your data private while providing full access to AI capabilities. The following sections describe how Amazon Quick on desktop handles security, privacy, and data storage. @@ -17 +17 @@ Your data is never used for AI model training. AWS does not use your conversatio -## Local-first architecture +## How data is handled @@ -19 +19 @@ Your data is never used for AI model training. AWS does not use your conversatio -The Amazon Quick desktop application runs most of its functionality locally on your computer. The following components run entirely on your machine. +The Amazon Quick desktop application processes your requests using AI models through API Gateway. The network calls Quick makes are to AI models and to your connected services (such as Slack, Outlook, or Gmail). Quick requires the following to be stored on your machine for the application to operate: @@ -21 +21 @@ The Amazon Quick desktop application runs most of its functionality locally on y - * **AI agent backend** – The agent runtime, including tool execution, skill loading, and task orchestration, runs as a local process on your machine. + * **Application configuration** – Settings, preferences, and connection state needed to run the desktop application. @@ -23 +23 @@ The Amazon Quick desktop application runs most of its functionality locally on y - * **Conversation history** – All chat messages, threads, and conversation metadata are stored and persisted locally. + * **Cached content** – Temporary data for performance, including file indexes for your granted local folders. @@ -25 +25 @@ The Amazon Quick desktop application runs most of its functionality locally on y - * **Knowledge graph** – The entity graph that captures people, projects, customers, channels, events, and their relationships is built and queried locally. + * **Credentials** – Authentication tokens for your connected third-party services. @@ -27 +26,0 @@ The Amazon Quick desktop application runs most of its functionality locally on y - * **Memory** – Learned facts, procedures, and preferences that personalize your experience are stored locally. @@ -29 +27,0 @@ The Amazon Quick desktop application runs most of its functionality locally on y - * **File indexing** – Keyword indexes, semantic search indexes, and knowledge graph extraction for your local folders are built and maintained on your machine. @@ -31,8 +28,0 @@ The Amazon Quick desktop application runs most of its functionality locally on y - * **Scheduled agents** – Background agents that run on recurring schedules execute locally. Your computer must be on and Quick must be running for agents to operate. - - * **Artifacts and outputs** – Documents, images, visualizations, and other outputs that Quick generates are saved locally. - - - - -All Amazon Quick desktop application data is stored locally in the `~/.quickwork/` directory on macOS or `%USERPROFILE%\.quickwork\` on Windows. The following table describes the data stored in this directory. @@ -42,12 +32 @@ All Amazon Quick desktop application data is stored locally in the `~/.quickwork -All Amazon Quick desktop application data is stored locally in the `~/.quickwork/` directory on your computer. The following table describes the data stored in this directory. - -Data type | Description ----|--- -Conversations| Chat messages, threads, and conversation metadata. -Knowledge graph| Entity graph database containing people, projects, customers, channels, events, and relationships. -Memory| Learned facts, procedures, tool strategies, and user preferences with confidence scores. -File indexes| Keyword search indexes and semantic search embeddings for granted folders. -Agent configurations| Scheduled agent definitions, schedules, prompts, and execution history. -Credentials| Saved authentication tokens for connected third-party services. -Artifacts| Downloaded files, generated documents, images, and other outputs. -Application settings| User preferences, theme selection, and configuration state. +Application data is stored in the `~/.quickwork/` directory on macOS or `%USERPROFILE%\.quickwork\` on Windows.