View a markdown version of this page

Prerequisites - Amazon Q Business

Amazon Q Business will no longer be open to new customers starting on July 31, 2026. If you would like to use the service, please sign up prior to July 30. For capabilities similar to Q Business, explore Amazon Quick. Learn more.

Prerequisites

To add an ISV as a data accessor, complete the following prerequisites:

  1. Get started with Amazon Q Business

  2. Create an Identity and Access Management (IAM) Identity Center-integrated application (IAM Federated application environments are not supported at this time).

  3. Set up the retriever and connect your data sources. For a complete list of data source connectors (see supported connectors). You need the relevant credentials from each connector that you want to retrieve data from. For more information, see Creating a retriever for an Amazon Q Business application environment and Connecting Amazon Q Business data sources.

  4. If you are using a customer managed key in your Amazon Q Business Application, you must set your key policy to allow the ISV principal access to the KMS key with the following policy:

    JSON
    
{
    "Version":"2012-10-17",
    "Id": "isv-key-consolepolicy",
    "Statement": [
        {
            "Sid": "EnableIAMUserPermissions",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::111122223333:role/isv-role"
            },
            "Action": "kms:Decrypt",
            "Resource": "arn:aws:kms:us-east-1:111122223333:key/key-id",
            "Condition": {
                "StringLike": {
                    "kms:ViaService": [
                        "qbusiness.us-east-1.amazonaws.com"
                    ]
                }
            }
        }
    ]
}