Subscribe users to Amazon Q Developer Pro in a management account
A management account is an AWS account that is part of an organization managed by AWS Organizations. It is the ultimate owner of the organization, and is responsible for paying all charges accrued by the accounts in its organization.
If you are the owner of a management account, use the following instructions to subscribe users to Amazon Q Developer Pro in your account.
Note
If possible, subscribe users in member accounts instead of your management account. For more information, see Step 1: Choose a deployment option.
For more information about organizations and management accounts, see Terminology and concepts for AWS Organizations in the AWS Organizations User Guide.
Prerequisites
Before you begin, make sure that:
-
You have a management AWS account.
-
You have the minimum permissions required to subscribe users and manage Amazon Q Developer settings. For more information, see Allow administrators to use the Amazon Q console, and Allow administrators to use the Amazon Q Developer console.
-
You have an organization instance of IAM Identity Center set up in your management account. This IAM Identity Center contains the identities of the users you want to subscribe to Amazon Q Developer Pro, and must be deployed in a supported AWS Region, as described in IAM Identity Center Regions supported by Amazon Q Developer. For more information about IAM Identity Center, see Organization instances of IAM Identity Center in the AWS IAM Identity Center User Guide.
Step 1: Create the Amazon Q Developer profile
-
Sign in to the AWS Management Console using your AWS management account.
-
Switch to the Amazon Q Developer console.
-
Make sure you're in the AWS Region where you want to create the Amazon Q Developer profile and where you want to store user data. For supported Regions, see Supported Regions for the Q Developer console and Q Developer profile.
-
Choose Get started.
The Create Amazon Q Developer profile dialog box appears.
-
Review the contents of the dialog box and provide a name for your profile in Profile name. For help with:
-
Cross-region inferencing, see Cross-region processing in Amazon Q Developer.
-
The Share Amazon Q Developer settings with member account check box, see Enabling profile sharing in Amazon Q Developer and Step 1: Choose a deployment option.
-
Disabling dashboard metrics, see Disabling the Amazon Q Developer dashboard.
Choose Create application.
The Amazon Q Developer profile and managed application are created.
-
Step 2: Subscribe users
-
In the Amazon Q Developer console, from the navigation pane, choose Subscriptions.
-
Choose Subscribe.
The Assign users and groups dialog box appears.
-
Start typing the group or user you want to subscribe. The group or user will auto-populate with the ones available in the IAM Identity Center set up in your management account.
Note
The dialog box only matches on user names or group names. It does not match on email addresses.
-
Choose Assign.
-
Have users check their email. They should receive an email titled Activate Your Amazon Q Developer Pro Subscription within 24 hours with instructions on how to begin using their Amazon Q Developer Pro license.
Step 3: Enable identity-enhanced console sessions
If you want to allow users to use their Amazon Q Developer Pro subscription in the AWS Management Console, and on AWS apps and websites, enable identity-enhanced console sessions. For more information, see Enabling identity-enhanced console sessions in the AWS IAM Identity Center User Guide.
Note
If you don't enable identity-enhanced console sessions, users can still use Amazon Q in the AWS Management Console, and on AWS apps and websites, but they'll be limited to the Free tier.
What resources were created?
When you created the Amazon Q Developer profile and subscribed users in your management account, Amazon Q created the following resources on your behalf:
-
Pro tier subscriptions for users, in Amazon Q Developer.
-
An Amazon Q Developer profile, in the Amazon Q Developer console, under Settings.
-
A managed application called QDevProfile-
region
, in the IAM Identity Center that is set up in your management account. The application is associated with the Amazon Q Developer profile. Like the Amazon Q Developer profile, the application is created once and shared between all Amazon Q subscribers in your management account.Note
Amazon Q can create the QDevProfile-
region
managed application in a maximum of 10 AWS accounts per AWS Region within an organization.