Configuring the Amazon Q Business browser extension for use
After installation and authentication, your users can access Amazon Q while browsing the web.
Note
-
Amazon Q does not support users who authenticate using external SAML providers.
-
The Safari browser is not supported.
-
Amazon Q Business does not use user data for service improvement or for training its underlying large language models (LLMs). For more information, see Amazon Q Business Service improvement.
-
Upload your documents and have Amazon Q answer contextual questions about them.
Topics
Prerequisites for integrating the Amazon Q browser extension
As admins, before you can integrate the Amazon Q Business browser extension, you must complete the following steps.
-
Create an IAM Identity Center-integrated application or Create an IAM federated application environment and create your Amazon Q Business web experience.
-
To use this feature, do the following
-
Enable Allow end users to send queries directly to the LLM in your Admin controls and guardrails. For more information, see the Response settings topic in Admin controls and guardrails and
chatModeif you are configuring programmatically. -
If you are using the IAM Identity Center or OpenID Connect (OIDC) provider in IAM, make sure your IAM role for an Amazon Q Business web experience using IAM Federation is up to date. For more information, see IAM role for an Amazon Q Business web experience using IAM Federation.
-
Integrating the browser extension with Amazon Q Business
To use the Amazon Q Business browser extension, you must allow it to connect to your Amazon Q Business application environment and web experience. To do this, admins can use the Amazon Q console, API, SDK, or AWS CLI.
Using the console
-
Sign in to the Amazon Q console.
-
Choose Applications, then select the name of your application environment from the list.
-
Choose Integrations under Enhancements.
-
Choose Edit in the Browser extensions section on the main page.
-
Choose the Browser extensions your want integrate with.
Using the AWS API
Admin users can enable your browser extensions using the UpdateWebExperience and CreateWebExperience
operations.
Activating and deploying the browser extension
After enabling the browser extension, complete these steps to activate and deploy it:
-
Allow-list URLs. If you are using
-
An OIDC provider like Okta: you must configure your identity provider (IdP) to support browser extension as follows. You will need to consult your provider on how to do this.
-
Make sure you enable refresh grants
-
Allow-list the following URLs with the IdP
-
Mozilla based browsers —
https://ba6e8e6e4fa44c1057cf5f26fba9b2e788dfc34f.extensions.allizom.org -
Chromium based browsers —
https://feihpdljijcgnokhfoibicengfiellbp.chromiumapp.org
-
-
-
IAM Identity Center, the above is not required and you can move to the next step of installing the browser extension for your users.
-
-
Install the browser extension for all users using the software deployment processes of your organization. The following is some information about policy settings from the browser vendors using mobile device management (MDM) software that may be helpful:
-
Firefox policy settings: https://mozilla.github.io/policy-templates/#extensionsettings
-
Chrome policy settings: https://chromeenterprise.google/policies/#ExtensionSettings
-
Edge policy settings: https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-policies#extensionsettings
and guide: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-manage-extensions-ref-guide
-
-
Provide your selected users the browser store URL + Web experience URL so they can download and install the browser extension and connect to Amazon Q.
