Amazon Q in Connect (wisdom)

Additions

Actions

• CreateAssistant
  
  • Description:  Grants permission to create an assistant
  • Access:  Write
  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• CreateAssistantAssociation
  
  • Description:  Grants permission to create an association between an assistant and another resource
  • Access:  Write
  • Resources: 

    Name: Assistant

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• CreateContent
  
  • Description:  Grants permission to create content
  • Access:  Write
  • Resources: 

    Name: KnowledgeBase

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• CreateKnowledgeBase
  
  • Description:  Grants permission to create a knowledge base
  • Access:  Write
  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• CreateSession
  
  • Description:  Grants permission to create a session
  • Access:  Write
  • Resources: 

    Name: Assistant

    Required: Yes

  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• DeleteAssistant
  
  • Description:  Grants permission to delete an assistant
  • Access:  Write
  • Resources: 

    Name: Assistant

    Required: Yes

• DeleteAssistantAssociation
  
  • Description:  Grants permission to delete an assistant association
  • Access:  Write
  • Resources: 

    Name: Assistant

    Required: Yes

    Name: AssistantAssociation

    Required: Yes

• DeleteContent
  
  • Description:  Grants permission to delete content
  • Access:  Write
  • Resources: 

    Name: Content

    Required: Yes

    Name: KnowledgeBase

    Required: Yes

• DeleteKnowledgeBase
  
  • Description:  Grants permission to delete a knowledge base
  • Access:  Write
  • Resources: 

    Name: KnowledgeBase

    Required: Yes

• GetAssistant
  
  • Description:  Grants permission to retrieve information about an assistant
  • Access:  Read
  • Resources: 

    Name: Assistant

    Required: Yes

• GetAssistantAssociation
  
  • Description:  Grants permission to retrieve information about an assistant association
  • Access:  Read
  • Resources: 

    Name: Assistant

    Required: Yes

    Name: AssistantAssociation

    Required: Yes

• GetContent
  
  • Description:  Grants permission to retrieve content, including a pre-signed URL to download the content
  • Access:  Read
  • Resources: 

    Name: Content

    Required: Yes

    Name: KnowledgeBase

    Required: Yes

• GetContentSummary
  
  • Description:  Grants permission to retrieve summary information about the content
  • Access:  Read
  • Resources: 

    Name: Content

    Required: Yes

    Name: KnowledgeBase

    Required: Yes

• GetKnowledgeBase
  
  • Description:  Grants permission to retrieve information about the knowledge base
  • Access:  Read
  • Resources: 

    Name: KnowledgeBase

    Required: Yes

• GetRecommendations
  
  • Description:  Grants permission to retrieve recommendations for the specified session
  • Access:  Read
  • Resources: 

    Name: Assistant

    Required: Yes

• GetSession
  
  • Description:  Grants permission to retrieve information for a specified session
  • Access:  Read
  • Resources: 

    Name: Assistant

    Required: Yes

    Name: Session

    Required: Yes

• ListAssistantAssociations
  
  • Description:  Grants permission to list information about assistant associations
  • Access:  List
  • Resources: 

    Name: Assistant

    Required: Yes

• ListAssistants
  
  • Description:  Grants permission to list information about assistants
  • Access:  List
• ListContents
  
  • Description:  Grants permission to list the content with a knowledge base
  • Access:  List
  • Resources: 

    Name: KnowledgeBase

    Required: Yes

• ListKnowledgeBases
  
  • Description:  Grants permission to list information about knowledge bases
  • Access:  List
• ListTagsForResource
  
  • Description:  Grants permission to list the tags for the specified resource
  • Access:  Read
• NotifyRecommendationsReceived
  
  • Description:  Grants permission to remove the specified recommendations from the specified assistant's queue of newly available recommendations
  • Access:  Write
  • Resources: 

    Name: Assistant

    Required: Yes

• QueryAssistant
  
  • Description:  Grants permission to perform a manual search against the specified assistant
  • Access:  Read
  • Resources: 

    Name: Assistant

    Required: Yes

• RemoveKnowledgeBaseTemplateUri
  
  • Description:  Grants permission to remove a URI template from a knowledge base
  • Access:  Write
  • Resources: 

    Name: KnowledgeBase

    Required: Yes

• SearchContent
  
  • Description:  Grants permission to search for content referencing a specified knowledge base. Can be used to get a specific content resource by its name
  • Access:  Read
  • Resources: 

    Name: KnowledgeBase

    Required: Yes

• SearchSessions
  
  • Description:  Grants permission to search for sessions referencing a specified assistant. Can be used to et a specific session resource by its name
  • Access:  Read
  • Resources: 

    Name: Assistant

    Required: Yes

• StartContentUpload
  
  • Description:  Grants permission to get a URL to upload content to a knowledge base
  • Access:  Write
  • Resources: 

    Name: KnowledgeBase

    Required: Yes

• TagResource
  
  • Description:  Grants permission to add the specified tags to the specified resource
  • Access:  Tagging
  • Conditions: 

    aws:TagKeys

    aws:RequestTag/${TagKey}

• UntagResource
  
  • Description:  Grants permission to remove the specified tags from the specified resource
  • Access:  Tagging
  • Conditions: 

    aws:TagKeys

• UpdateContent
  
  • Description:  Grants permission to update information about the content
  • Access:  Write
  • Resources: 

    Name: Content

    Required: Yes

    Name: KnowledgeBase

    Required: Yes

• UpdateKnowledgeBaseTemplateUri
  
  • Description:  Grants permission to update the template URI of a knowledge base
  • Access:  Write
  • Resources: 

    Name: KnowledgeBase

    Required: Yes

Resources

• Assistant
  
  • Arn:  arn:${Partition}:wisdom:${Region}:${Account}:assistant/${AssistantId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• AssistantAssociation
  
  • Arn:  arn:${Partition}:wisdom:${Region}:${Account}:association/${AssistantId}/${AssistantAssociationId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• Content
  
  • Arn:  arn:${Partition}:wisdom:${Region}:${Account}:content/${KnowledgeBaseId}/${ContentId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• KnowledgeBase
  
  • Arn:  arn:${Partition}:wisdom:${Region}:${Account}:knowledge-base/${KnowledgeBaseId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• Session
  
  • Arn:  arn:${Partition}:wisdom:${Region}:${Account}:session/${AssistantId}/${SessionId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters actions based on the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters actions based on the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters actions based on the tag keys that are passed in the request
  • Type:  String