Amazon Q Business Q Apps (qapps)

Additions

Actions

• AssociateLibraryItemReview
  
  • Description:  Grants permission to associate a library item review in Q Business application
  • Access:  Write
  • Resources: 

    Name: qapp

    Required: Yes

• DisassociateLibraryItemReview
  
  • Description:  Grants permission to disassociate a library item review in Q Business application
  • Access:  Write
  • Resources: 

    Name: qapp

    Required: Yes

• GetQAppSession
  
  • Description:  Grants permission to get Q App session in Q Business application
  • Access:  Read
  • Resources: 

    Name: qapp-session

    Required: Yes

• GetQAppSessionMetadata
  
  • Description:  Grants permission to get Q App session metadata in Q Business application
  • Access:  Read
  • Resources: 

    Name: qapp-session

    Required: Yes

• ImportDocument
  
  • Description:  Grants permission to import a document to Q App or Q App Session in Q Business application
  • Access:  Write
  • Resources: 

    Name: qapp

    Required: No

    Name: qapp-session

    Required: No

• PredictQApp
  
  • Description:  Grants permission to predict Q App from conversation log or problem statement in Q Business application
  • Access:  Write
  • Resources: 

    Name: application

    Required: Yes

• TagResource
  
  • Description:  Grants permission to tag a resource with given key value pairs
  • Access:  Tagging
  • Resources: 

    Name: qapp

    Required: No

    Name: qapp-session

    Required: No

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• UpdateQAppSession
  
  • Description:  Grants permission to update Q App session in Q Business application
  • Access:  Write
  • Resources: 

    Name: qapp-session

    Required: Yes

• UpdateQAppSessionMetadata
  
  • Description:  Grants permission to update Q App session metadata in Q Business application
  • Access:  Write
  • Resources: 

    Name: qapp-session

    Required: Yes

Resources

• qapp
  
  • Arn:  arn:${Partition}:qapps:${Region}:${Account}:application/${ApplicationId}/qapp/${AppId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• qapp-session
  
  • Arn:  arn:${Partition}:qapps:${Region}:${Account}:application/${ApplicationId}/qapp/${AppId}/session/${SessionId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• aws:RequestTag/${TagKey}
  
  • Description:  Filters access by the tags that are passed in the request
  • Type:  String
• aws:ResourceTag/${TagKey}
  
  • Description:  Filters access by the tags associated with the resource
  • Type:  String
• aws:TagKeys
  
  • Description:  Filters access by the tag keys that are passed in the request
  • Type:  ArrayOfString