AWS Security ChangesHomeSearch

AWS amazonq: Update IAM policy scope wording to AWS assistant branding

Service: amazonq · 2026-11-06 · Documentation low

File: amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.md · Type: iam

Summary

Updates the scope statement of the IAM policies/examples topic to reference the AWS assistant in the console and console mobile app plus Amazon Q Developer in chat applications, and rewords the SCP note to say denying access doesn't hide the AWS assistant icon or chat panel.

Security assessment

The file covers IAM policies and SCPs, but this diff only renames the surfaces the policies apply to and rephrases an existing SCP caveat; no new permission, boundary, or policy guidance is introduced, so it is a low-severity editorial change in a security-adjacent doc.

Evidence

+Denying access to Amazon Q Developer doesn't hide the AWS assistant icon or chat panel in the AWS Management Console or AWS Console Mobile Application.

Diff

diff --git a/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.md b/amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.md
index fcbf71b..1aa7575 100644
--- a//amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.md
+++ b//amazonq/latest/qdeveloper-ug/security_iam_manage-access-with-policies.md
@@ -15 +15 @@ The information on this page pertains to accessing Amazon Q Developer. For infor
-The policies and examples in this topic are specific to Amazon Q in the AWS Management Console, AWS Console Mobile Application, AWS website, AWS Documentation, and in chat applications. Other services integrated with Amazon Q might require different policies or settings. End users of Amazon Q in third-party IDEs are not required to use IAM policies. For more information, see the documentation for the service that contains an Amazon Q feature or integration.
+The policies and examples in this topic are specific to the AWS assistant in the AWS Management Console and AWS Console Mobile Application, and to Amazon Q Developer in chat applications. Other services integrated with Amazon Q might require different policies or settings. End users of Amazon Q in third-party IDEs are not required to use IAM policies. For more information, see the documentation for the service that contains an Amazon Q feature or integration.
@@ -127 +127 @@ The following SCP denies access to Amazon Q Developer.
-Denying access to Amazon Q will not disable the Amazon Q icon or chat panel in the AWS console, AWS website, AWS documentation pages, or AWS Console Mobile Application. 
+Denying access to Amazon Q Developer doesn't hide the AWS assistant icon or chat panel in the AWS Management Console or AWS Console Mobile Application.