q

54 actions in the q service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.

q:AssociateConnectorResource

Write

Grants permission to associate an AWS resource with an Amazon Q connector

q:AssociateLoginDomain

Write

Grants permission to associate a login domain with an Amazon Q Developer Profile

q:BatchDescribeGroups

Read

Grants permission to describe multiple groups for an Amazon Q Developer Profile

q:BatchDescribeUsers

Read

Grants permission to describe multiple users for an Amazon Q Developer Profile

q:BatchGetGroups

Read

Grants permission to get multiple groups for an Amazon Q Developer Profile

q:BatchGetUsers

Read

Grants permission to get multiple users for an Amazon Q Developer Profile

q:CreateArtifact

Write

Grants permission to create an artifact with Amazon Q

q:CreateAssignment

Write

Grants permission to create a user or group assignment for an Amazon Q Developer Profile

q:CreateAuthGrant

Write

Grants permission to create OAuth user in Amazon Q

q:CreateOAuthAppConnection

Write

Grants permission to register an OAuth application in Amazon Q

q:CreatePlugin

Write

Grants permission to create and configure a third party plugin in Amazon Q

q:CreateScimAccessToken

Write

Grants permission to create a SCIM access token for an Amazon Q Developer Profile

q:DeleteAssignment

Write

Grants permission to delete a user or group assignment for an Amazon Q Developer Profile

q:DeleteConversation

Write

Grants permission to delete a conversation with Amazon Q

q:DeleteOAuthAppConnection

Write

Grants permission to delete an OAuth application in Amazon Q

q:DeletePlugin

Write

Grants permission to delete a configured plugin in Amazon Q

q:DeleteScimAccessToken

Write

Grants permission to delete a SCIM access token for an Amazon Q Developer Profile

q:DisassociateLoginDomain

Write

Grants permission to disassociate a login domain from an Amazon Q Developer Profile

q:GenerateCodeFromCommands

Read

Grants permission to generate code from CLI commands in Amazon Q

q:GenerateCodeRecommendations

Read

Grants permission to generate code recommendations in Amazon Q

q:GetArtifact

Read

Grants permission to view an Amazon Q artifact

q:GetArtifactActionResult

Read

Grants permission to view results of an action in an Amazon Q artifact

q:GetConnector

Read

Grants permission to view information about a specific Amazon Q connector

q:GetConversation

Read

Grants permission to get individual messages associated with a specific conversation with Amazon Q

q:GetIdentityMetadata

Read

Grants permission to Amazon Q to get the identity metadata

q:GetPlugin

Read

Grants permission to view information about a specific configured Amazon Q plugin

q:GetTroubleshootingResults

Read

Grants permission to get troubleshooting results with Amazon Q

q:ListConversations

Read

Grants permission to list individual conversations associated with a specific Amazon Q user

q:ListDashboardMetrics

List

Grants permission to read metrics to populate Amazon Q dashboard

q:ListGroups

List

Grants permission to list groups for an Amazon Q Developer Profile

q:ListLoginDomains

List

Grants permission to list login domains for an Amazon Q Developer Profile

q:ListPluginProviders

List

Grants permission to list available plugins in Amazon Q

q:ListPlugins

List

Grants permission to list configured plugins in Amazon Q

q:ListScimAccessTokens

List

Grants permission to list SCIM access tokens for an Amazon Q Developer Profile

q:ListTagsForResource

List

Grants permission to list all tags associated with an Amazon Q resource

q:ListUsers

List

Grants permission to list users for an Amazon Q Developer Profile

q:PassRequest

Write

Grants permission to allow Amazon Q to perform actions on your behalf

q:PerformArtifactAction

Write

Grants permission to perform an action in an Amazon Q artifact

q:RejectConnector

Write

Grants permission to reject a connection request for an Amazon Q connector

q:SendEvent

Write

Grants permission to trigger asynchronous Amazon Q actions

q:SendMessage

Write

Grants permission to send a message to Amazon Q

q:StartConversation

Write

Grants permission to start a conversation with Amazon Q

q:StartTroubleshootingAnalysis

Write

Grants permission to start a troubleshooting analysis with Amazon Q

q:StartTroubleshootingResolutionExplanation

Write

Grants permission to start a troubleshooting resolution explanation with Amazon Q

q:TagResource

Tagging

Grants permission to associate tags with an Amazon Q resource

q:UntagResource

Tagging

Grants permission to remove tags associated with an Amazon Q resource

q:UpdateAssignment

Write

Grants permission to update a user or group assignment for an Amazon Q Developer Profile

q:UpdateAuthGrant

Write

Grants permission to update OAuth user in Amazon Q

q:UpdateConversation

Write

Grants permission to update a conversation with Amazon Q

q:UpdateOAuthAppConnection

Write

Grants permission to update an OAuth application in Amazon Q

q:UpdatePlugin

Write

Grants permission to update a third party plugin in Amazon Q

q:UpdateTroubleshootingCommandResult

Write

Grants permission to update a troubleshooting command result with Amazon Q

q:UsePlugin

Write

Grants permission to use Amazon Q plugins

q:VerifyOAuthAppConnection

Write

Grants permission to verify an OAuth application in Amazon Q