Amazon Q (q)

2026-04-30

17 new actions | 1 updated resource

Additions

    Actions
  • AssociateLoginDomain
    • Description:  Grants permission to associate a login domain with an Amazon Q Developer Profile
    • Access:  Write
    • Resources: 

      Name: profile

      Required: Yes

  • BatchDescribeGroups
    • Description:  Grants permission to describe multiple groups for an Amazon Q Developer Profile
    • Access:  Read
    • Resources: 

      Name: profile

      Required: Yes

  • BatchDescribeUsers
    • Description:  Grants permission to describe multiple users for an Amazon Q Developer Profile
    • Access:  Read
    • Resources: 

      Name: profile

      Required: Yes

  • BatchGetGroups
    • Description:  Grants permission to get multiple groups for an Amazon Q Developer Profile
    • Access:  Read
    • Resources: 

      Name: profile

      Required: Yes

  • BatchGetUsers
    • Description:  Grants permission to get multiple users for an Amazon Q Developer Profile
    • Access:  Read
    • Resources: 

      Name: profile

      Required: Yes

  • CreateArtifact
    • Description:  Grants permission to create an artifact with Amazon Q
    • Access:  Write
  • CreateScimAccessToken
    • Description:  Grants permission to create a SCIM access token for an Amazon Q Developer Profile
    • Access:  Write
    • Resources: 

      Name: profile

      Required: Yes

  • DeleteScimAccessToken
    • Description:  Grants permission to delete a SCIM access token for an Amazon Q Developer Profile
    • Access:  Write
    • Resources: 

      Name: profile

      Required: Yes

  • DisassociateLoginDomain
    • Description:  Grants permission to disassociate a login domain from an Amazon Q Developer Profile
    • Access:  Write
    • Resources: 

      Name: profile

      Required: Yes

  • GetArtifact
    • Description:  Grants permission to view an Amazon Q artifact
    • Access:  Read
  • GetArtifactActionResult
    • Description:  Grants permission to view results of an action in an Amazon Q artifact
    • Access:  Read
    • Dependents: 

      cloudformation:GetResource

      cloudformation:GetResourceRequestStatus

      cloudformation:ListResourceRequests
  • ListGroups
    • Description:  Grants permission to list groups for an Amazon Q Developer Profile
    • Access:  List
    • Resources: 

      Name: profile

      Required: Yes

  • ListLoginDomains
    • Description:  Grants permission to list login domains for an Amazon Q Developer Profile
    • Access:  List
    • Resources: 

      Name: profile

      Required: Yes

  • ListScimAccessTokens
    • Description:  Grants permission to list SCIM access tokens for an Amazon Q Developer Profile
    • Access:  List
    • Resources: 

      Name: profile

      Required: Yes

  • ListUsers
    • Description:  Grants permission to list users for an Amazon Q Developer Profile
    • Access:  List
    • Resources: 

      Name: profile

      Required: Yes

  • PerformArtifactAction
    • Description:  Grants permission to perform an action in an Amazon Q artifact
    • Access:  Write
    • Dependents: 

      cloudformation:CancelResourceRequest

      cloudformation:CreateResource

      cloudformation:GetResource

      cloudformation:GetResourceRequestStatus

      cloudformation:ListResourceRequests

      cloudformation:UpdateResource

      iam:AttachRolePolicy

      iam:CreatePolicy

      iam:CreateRole

      iam:PutRolePolicy
  • UpdateAssignment
    • Description:  Grants permission to update a user or group assignment for an Amazon Q Developer Profile
    • Access:  Write
    • Resources: 

      Name: profile

      Required: Yes

    • Conditions: 

      identitystore:UserId

      identitystore:GroupId

Updates

    Resources
  • profile
      Conditions
    • ＋ aws:ResourceTag/${TagKey}