Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Q Business

Amazon Q Business (service prefix: qbusiness) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Q Business
Actions defined by Amazon Q Business
Permission-only actions for Amazon Q Business
Resource types defined by Amazon Q Business
Condition keys for Amazon Q Business

API operations defined by Amazon Q Business

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Condition key	Possible value(s)	Access level
AssociatePermission	qbusiness:AssociatePermission			Write
AssociatePermission	qbusiness:PutResourcePolicy			Write
BatchDeleteDocument	qbusiness:BatchDeleteDocument			Write
BatchPutDocument	qbusiness:BatchPutDocument			Write
BatchPutDocument	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
CancelSubscription	qbusiness:CancelSubscription			Write
Chat	qbusiness:Chat			Read
ChatSync	qbusiness:ChatSync			Read
CheckDocumentAccess	qbusiness:CheckDocumentAccess			Read
CreateAnonymousWebExperienceUrl	qbusiness:CreateAnonymousWebExperienceUrl			Write
CreateApplication	qbusiness:CreateApplication			Write
	qbusiness:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
CreateChatResponseConfiguration	qbusiness:CreateChatResponseConfiguration			Write
CreateChatResponseConfiguration	qbusiness:TagResource			Tagging, Write
CreateDataAccessor	qbusiness:CreateDataAccessor			Write
	qbusiness:CreateDataAccessorWithTti			Write
	qbusiness:TagResource			Tagging, Write
CreateDataSource	qbusiness:CreateDataSource			Write
	qbusiness:DisableAclOnDataSource			Write
	qbusiness:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
CreateIndex	qbusiness:CreateIndex			Write
CreateIndex	qbusiness:TagResource			Tagging, Write
CreatePlugin	qbusiness:CreatePlugin			Write
	qbusiness:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
CreateRetriever	qbusiness:CreateRetriever			Write
	qbusiness:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
CreateSubscription	qbusiness:CreateSubscription			Write
CreateUser	qbusiness:CreateUser			Write
CreateWebExperience	qbusiness:CreateWebExperience			Write
	qbusiness:TagResource			Tagging, Write
	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
DeleteApplication	qbusiness:DeleteApplication			Write
DeleteAttachment	qbusiness:DeleteAttachment			Write
DeleteChatControlsConfiguration	qbusiness:DeleteChatControlsConfiguration			Write
DeleteChatResponseConfiguration	qbusiness:DeleteChatResponseConfiguration			Write
DeleteConversation	qbusiness:DeleteConversation			Write
DeleteDataAccessor	qbusiness:DeleteDataAccessor			Write
DeleteDataSource	qbusiness:DeleteDataSource			Write
DeleteGroup	qbusiness:DeleteGroup			Write
DeleteIndex	qbusiness:DeleteIndex			Write
DeletePlugin	qbusiness:DeletePlugin			Write
DeleteRetriever	qbusiness:DeleteRetriever			Write
DeleteUser	qbusiness:DeleteUser			Write
DeleteWebExperience	qbusiness:DeleteWebExperience			Write
DisassociatePermission	qbusiness:DisassociatePermission			Write
DisassociatePermission	qbusiness:PutResourcePolicy			Write
GetApplication	qbusiness:GetApplication			Read
GetChatControlsConfiguration	qbusiness:GetChatControlsConfiguration			List
GetChatResponseConfiguration	qbusiness:GetChatResponseConfiguration			Read
GetDataAccessor	qbusiness:GetDataAccessor			Read
GetDataSource	qbusiness:GetDataSource			Read
GetDocumentContent	qbusiness:GetDocumentContent			Read
GetGroup	qbusiness:GetGroup			Read
GetIndex	qbusiness:GetIndex			Read
GetMedia	qbusiness:GetMedia			Read
GetPlugin	qbusiness:GetPlugin			Read
GetPolicy	qbusiness:GetPolicy			Read
GetRetriever	qbusiness:GetRetriever			Read
GetUser	qbusiness:GetUser			Read
GetWebExperience	qbusiness:GetWebExperience			Read
ListApplications	qbusiness:ListApplications			List
ListAttachments	qbusiness:ListAttachments			List
ListChatResponseConfigurations	qbusiness:ListChatResponseConfigurations			List
ListConversations	qbusiness:ListConversations			List
ListDataAccessors	qbusiness:ListDataAccessors			List
ListDataSourceSyncJobs	qbusiness:ListDataSourceSyncJobs			List
ListDataSources	qbusiness:ListDataSources			List
ListDocuments	qbusiness:ListDocuments			List
ListGroups	qbusiness:ListGroups			List
ListIndices	qbusiness:ListIndices			List
ListMessages	qbusiness:ListMessages			List
ListPluginActions	qbusiness:ListPluginActions			Read
ListPluginTypeActions	qbusiness:ListPluginTypeActions			Read
ListPluginTypeMetadata	qbusiness:ListPluginTypeMetadata			Read
ListPlugins	qbusiness:ListPlugins			List
ListRetrievers	qbusiness:ListRetrievers			List
ListSubscriptions	qbusiness:ListSubscriptions			List
ListTagsForResource	qbusiness:ListTagsForResource			Read
ListWebExperiences	qbusiness:ListWebExperiences			List
PutFeedback	qbusiness:PutFeedback			Write
PutGroup	qbusiness:PutGroup			Write
PutGroup	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
SearchRelevantContent	qbusiness:SearchRelevantContent			Read
StartDataSourceSyncJob	qbusiness:StartDataSourceSyncJob			Write
StopDataSourceSyncJob	qbusiness:StopDataSourceSyncJob			Write
TagResource	qbusiness:TagResource			Tagging, Write
UntagResource	qbusiness:UntagResource			Tagging, Write
UpdateApplication	qbusiness:UpdateApplication			Write
UpdateApplication	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
UpdateChatControlsConfiguration	qbusiness:UpdateChatControlsConfiguration			Write
UpdateChatResponseConfiguration	qbusiness:UpdateChatResponseConfiguration			Write
UpdateDataAccessor	qbusiness:UpdateDataAccessor			Write
UpdateDataSource	qbusiness:UpdateDataSource			Write
UpdateDataSource	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
UpdateIndex	qbusiness:UpdateIndex			Write
UpdatePlugin	qbusiness:UpdatePlugin			Write
UpdatePlugin	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
UpdateRetriever	qbusiness:UpdateRetriever			Write
UpdateRetriever	iam:PassRole	iam:PassedToService	qbusiness.amazonaws.com	Write
UpdateSubscription	qbusiness:UpdateSubscription			Write
UpdateUser	qbusiness:UpdateUser			Write
UpdateWebExperience