View a markdown version of this page

Getting started with the AWS assistant - AWS assistant
Step 1: Access the AWS assistantStep 2: Verify required permissions[Optional] Step 3: Review Pro tier access

Getting started with the AWS assistant

Use the AWS assistant for general questions in the AWS Management Console and AWS Console Mobile Application. Available capabilities vary between the AWS Management Console and the AWS Console Mobile Application.

Step 1: Access the AWS assistant

Choose where you want to use the AWS assistant.

AWS Management Console

  1. Sign in to the AWS Management Console at https://console.aws.amazon.com/.

  2. Choose the AWS assistant icon in the unified navigation bar. The AWS assistant chat panel opens as a side panel.

  3. Enter a question in the text field, and review the response and its source links.

AWS Console Mobile Application

  1. Open the AWS Console Mobile Application.

  2. Choose the AWS assistant icon.

  3. Enter a question, and review the response and its source links.

Step 2: Verify required permissions

Your IAM identity needs permission to use the AWS assistant. The existing AmazonQDeveloperAccess AWS managed policy provides quick access to the base conversational features.

To chat, your IAM identity needs permission for q:StartConversation, q:SendMessage, q:GetConversation, and q:ListConversations. If one of these actions isn't allowed, you get a permissions error. For all AWS assistant permissions, see Permissions reference for the AWS assistant.

You need additional permissions when the AWS assistant accesses service APIs or resources on your behalf. These permissions can cover cost data, support cases, or customer managed AWS Key Management Service (AWS KMS) keys.

The AWS assistant does not give you access to resources or actions that your IAM identity cannot access. For example, to list Amazon Simple Storage Service (Amazon S3) buckets, your identity must have s3:ListAllMyBuckets.

For example policies, see Identity-based policy examples for the AWS assistant.

[Optional] Step 3: Review Pro tier access

If you already have an Amazon Q Developer Pro subscription and want to use Pro tier benefits in the AWS Management Console, use AWS IAM Identity Center. If your AWS IAM Identity Center identity has an active Amazon Q Developer Pro subscription, the subscription is available automatically.

Customer managed AWS KMS keys are available only with a Pro subscription. For more information, see Key management.

If you access the AWS Management Console with IAM or IAM federation, you might be prompted to authenticate with AWS IAM Identity Center. This prompt can appear after you reach a Free tier quota or use a Pro-only capability. For tier quotas, see Amazon Q Developer pricing.

Note the following identity requirements:

  • The AWS assistant doesn't support AWS Builder ID.

  • Pro tier access in the AWS Management Console requires an organization instance of IAM Identity Center with identity-enhanced console sessions enabled. If your identity is in an account instance, you can use the Free tier only.

  • If you're subscribed to Amazon Q Developer Pro in the management account of an organization in AWS Organizations, you can use your subscription while signed in to a member account only if an administrator enables profile sharing. Otherwise, you use the Free tier in member accounts. For more information, see Enabling profile sharing in Amazon Q Developer in the Amazon Q Developer User Guide.

Normal AWS service charges can apply when the AWS assistant calls other services on your behalf.