Amazon Q

Amazon Q Business – Enterprise AI Assistant Guide

~ Last updated on : ~ Kiro Agent

Amazon Q Business Overview

  • Amazon Q Business is a fully managed, generative AI-powered enterprise assistant built on Amazon Bedrock that answers questions, provides summaries, generates content, and completes tasks based on enterprise data.
  • Provides permissions-aware responses with citations from enterprise data sources for use cases such as IT helpdesk, HR, benefits, and compliance.
  • Supports Retrieval Augmented Generation (RAG) — combining enterprise knowledge retrieval with LLM-powered response generation.
  • Integrates with 40+ data source connectors, built-in and custom plugins, and Amazon Q Apps for citizen-developed AI applications.
  • Available through a web experience, browser extensions (Chrome, Firefox, Edge), Slack, and Microsoft Teams integrations.
  • Important: Amazon Q Business will no longer be open to new customers starting July 31, 2026. Existing customers remain fully supported. AWS recommends migrating to Amazon Quick for similar and enhanced capabilities.

Amazon Q Business Architecture

Amazon Q Business Architecture

Core Components

  • Application
    • Top-level container that encapsulates the entire Q Business deployment.
    • Each application has its own configuration, data sources, plugins, guardrails, and web experience.
    • Linked to an IAM Identity Center instance or IAM Federation for user authentication.
    • Supports both authenticated (IAM Identity Center/IAM Federation) and anonymous access modes.
  • Index
    • Stores and organizes ingested enterprise documents for retrieval.
    • Two index types available:
      • Starter Index — runs in 1 AZ, ideal for proof-of-concept; includes 20,000 documents or 200 MB extracted text capacity and 100 hours connector usage.
      • Enterprise Index — runs across 3 AZs for high availability; same base capacity with support for customer managed key (CMK) encryption.
    • Capacity can be scaled by adding additional index units.
  • Retriever
    • Responsible for fetching relevant documents from the index to answer user queries.
    • Two retriever options:
      • Native Retriever — built-in retriever managed by Amazon Q Business with semantic search capabilities.
      • Amazon Kendra Retriever — uses an existing Amazon Kendra index for retrieval, ideal for organizations already using Kendra with advanced search tuning.
  • Data Sources
    • Connectors that crawl, ingest, and synchronize enterprise content into the index.
    • Support scheduled sync (incremental and full) to keep index current.
    • Crawl Access Control Lists (ACLs) by default for document-level security.
  • Web Experience
    • Managed chat interface for end users to interact with Amazon Q Business.
    • Customizable with organization branding, visual themes, and conversation starters.
    • Supports single sign-on (SSO) via IAM Identity Center.
    • Can be embedded directly into applications and websites.

How RAG Works in Q Business

  1. User submits a natural language query through the web experience or integration.
  2. The retriever searches the index for relevant enterprise documents.
  3. ACLs are evaluated to ensure the user has permission to access retrieved documents.
  4. Retrieved documents (with citations) are passed to the underlying LLM.
  5. The LLM generates a comprehensive, contextual response grounded in enterprise data.
  6. Response is returned with source citations for verification.

Data Source Connectors

  • Amazon Q Business provides 40+ pre-built connectors to synchronize data from enterprise content repositories.
  • Connectors can be scheduled for automatic sync (full or incremental) to keep the index up-to-date.
  • All connectors crawl ACLs by default to maintain document-level security.

Cloud Storage & File Systems

Connector Description
Amazon S3 Indexes documents stored in S3 buckets. Supports PDF, HTML, Word, PowerPoint, Excel, CSV, and text files. Configurable with prefix filters.
Amazon FSx for Windows Indexes documents from FSx Windows file shares with NTFS ACL support.
Box Crawls files, folders, comments, and tasks from Box enterprise accounts.
Dropbox Indexes files, paper documents, and shared folders from Dropbox Business accounts.
Google Drive Crawls Google Docs, Sheets, Slides, PDFs, and shared drives with Google Workspace ACL support.
Microsoft OneDrive Indexes personal and shared files from Microsoft 365 OneDrive accounts.

Collaboration & Productivity

Connector Description
Confluence (Cloud) Crawls spaces, pages, blogs, comments, and attachments from Atlassian Confluence Cloud.
Confluence (Server) Indexes on-premises Confluence Server/Data Center instances.
Microsoft SharePoint (Cloud) Crawls sites, document libraries, lists, and pages from SharePoint Online with Microsoft 365 ACLs.
Microsoft SharePoint Server Supports SharePoint Server 2016, 2019, and Subscription Edition for on-premises deployments.
Microsoft Teams Indexes channel messages, files, wikis, and meeting notes from Teams.
Slack Crawls public and private channel messages, threads, and shared files.
Smartsheet Indexes sheets, reports, and dashboards from Smartsheet workspaces.
Quip Crawls documents, spreadsheets, and chat threads from Salesforce Quip (legacy connector).

Communication & Email

Connector Description
Gmail Indexes email messages and attachments from Google Workspace Gmail accounts.
Google Calendar (Preview) Crawls calendar events and descriptions from Google Workspace.
Microsoft Exchange Indexes emails, calendar events, contacts, and attachments from Exchange Online.

Project Management & ITSM

Connector Description
Jira Crawls issues, projects, comments, attachments, and worklogs from Jira Cloud.
ServiceNow Online Indexes knowledge articles, incidents, catalog items, and attachments from ServiceNow.
Zendesk Crawls tickets, articles, comments, and community posts from Zendesk.
Asana (Preview) Indexes tasks, projects, and comments from Asana workspaces.

CRM & Business Applications

Connector Description
Salesforce Online Crawls knowledge articles, accounts, cases, opportunities, feeds, and custom objects.

Source Code & Development

Connector Description
GitHub (Cloud) Indexes repositories, issues, pull requests, READMEs, and wiki pages from GitHub.com.
GitHub (Server) Crawls on-premises GitHub Enterprise Server instances.

Web & Custom

Connector Description
Amazon Q Web Crawler Crawls and indexes content from specified websites with configurable depth and URL filters.
Custom Data Source Connector Enables integration with any data source using the Amazon Q Business API. Developers push documents programmatically via BatchPutDocument API.

Database Connectors (via Custom Connector)

  • Database sources like MySQL, PostgreSQL, and Oracle can be integrated using the Custom Data Source Connector.
  • Developers extract data from databases, format as documents, and push to Q Business via the BatchPutDocument API.
  • Supports any structured data source that can be programmatically accessed.

Plugins & Actions

  • Plugins enable Amazon Q Business users to perform actions in third-party applications directly from the chat interface.
  • Users can create tickets, update records, send notifications, and query application data using natural language.
  • Plugins are only available with the Pro subscription tier.
  • Amazon Q Business supports 50+ action types across built-in and custom plugins.

Built-in Plugins

Plugin Capabilities
Jira Cloud Create issues, update status, add comments, assign tickets, search issues, transition workflows
ServiceNow Create/update incidents, search knowledge base, manage change requests, catalog items
Zendesk Create/update tickets, search articles, manage users, add comments
Salesforce Create/update cases, search accounts and contacts, manage opportunities
PagerDuty Create/acknowledge/resolve incidents, manage on-call schedules, escalation policies
Smartsheet Create/update rows, search sheets, manage attachments, update cells

Custom Plugins

  • Custom plugins allow integration with any third-party application using an OpenAPI schema definition.
  • Steps to create a custom plugin:
    1. Define an OpenAPI 3.0 specification describing the API endpoints, parameters, and responses.
    2. Configure authentication (OAuth 2.0, API key, or no auth).
    3. Upload the schema to Amazon Q Business and configure the plugin.
    4. Amazon Q Business automatically discovers available actions from the schema.
  • Use cases: submit time-off requests, send meeting invites, query internal APIs, trigger CI/CD pipelines.
  • Custom plugins support OAuth 2.0 authorization code flow for secure per-user authentication.

Chat Orchestration

  • Amazon Q Business automatically orchestrates end user chat requests across configured plugins and data sources.
  • Determines whether a query requires knowledge retrieval, plugin action execution, or both.
  • Enables multi-step workflows combining data retrieval and actions in a single conversation.

Amazon Q Apps

  • Amazon Q Apps enables users to build lightweight, purpose-built AI applications without any coding — empowering citizen developers.
  • Available exclusively to Pro subscription users (since July 1, 2024).
  • Users create Q Apps directly from the web experience interface using natural language descriptions or by converting chat conversations into reusable apps.

App Builder

  • Q Apps are composed of cards — modular building blocks that define inputs, processing, and outputs:
    • Text Input Card — accepts user text input
    • File Upload Card — allows file uploads (up to 10 MB per card)
    • Query Card — sends a prompt to the LLM with optional enterprise data context
    • Output Card — displays generated responses
  • Cards can be connected in sequence to create multi-step workflows.
  • Apps can leverage enterprise data sources configured in the Q Business application.

Sharing & Permissions

  • Private sharing — share apps with specific users within the Q Business application environment.
  • Library publishing — publish apps to the organization’s app library for broader discovery.
  • App creators control visibility and access at a granular level.
  • Administrators can enable/disable Q Apps at the application level.

Data Collection

  • Q Apps support data collection forms that allow shared apps to collect structured data from multiple users.
  • Useful for surveys, feedback collection, intake forms, and structured workflows.

Example Use Cases

  • Meeting summary generator — upload meeting notes, get action items and summaries
  • RFP response assistant — input requirements, generate proposal drafts from company knowledge
  • Onboarding checklist app — guide new hires through company policies and procedures
  • Competitive analysis tool — input competitor info, get insights from internal research documents

Admin Controls & Guardrails

  • Amazon Q Business provides configurable guardrails (chat controls) to manage and control the end user chat experience.
  • Controls are organized into global controls and topic-level controls.

Global Controls

  • Response source controls — specify whether responses use:
    • Enterprise data only (strict RAG mode)
    • Enterprise data + LLM model knowledge (when enterprise data lacks answers)
  • Blocked phrases — define specific words or phrases that Amazon Q Business must never include in responses.
  • File upload control — enable or disable end user file uploads during chat sessions.
  • Chat personalization — control whether responses are personalized using IAM Identity Center user attributes (address, job info).
  • Chat orchestration — enable/disable automatic routing of requests across plugins and data sources.
  • Hallucination detection — enable automatic checking and correction of responses for inconsistencies.
  • Global controls cannot be created or deleted — only updated.

Topic-Level Controls

  • Define natural language topics that Amazon Q Business should handle in specific ways.
  • For each topic, configure:
    • Topic description — natural language description of the topic area
    • Example user messages — sample queries that fall under this topic
    • Response behavior:
      • Allow responses from enterprise data only
      • Allow responses from enterprise data + model knowledge
      • Block the topic entirely (refuse to answer)
    • Custom response message — provide a specific response for blocked topics
  • Topic controls can be scoped to specific users and groups for fine-grained governance.

Blocked Topics

  • Administrators can block entire topics to prevent the assistant from discussing sensitive subjects.
  • Common blocked topics: competitor information, executive compensation, unreleased products, legal opinions.
  • When a blocked topic is detected, Q Business returns the configured custom response message.

Access Control & Security

  • Amazon Q Business implements defense-in-depth security with multiple layers of access control.
  • Built on Amazon Bedrock, inheriting automated abuse detection and responsible AI controls.

IAM Identity Center Integration

  • AWS IAM Identity Center (recommended) provides centralized identity management for Q Business.
  • Supports single sign-on (SSO) with external identity providers (Okta, Azure AD, Ping Identity, etc.).
  • Manages user subscriptions, group memberships, and application access centrally.
  • Enables automatic subscription deduplication across multiple Q Business applications sharing the same Identity Center instance.
  • IAM Federation (alternative) — supports OIDC and SAML identity providers for organizations not using Identity Center.

Document-Level Security (ACL Crawling)

  • Amazon Q Business crawls Access Control Lists (ACLs) from data sources by default.
  • Maps source system users/groups to IAM Identity Center identities via a User Store.
  • Ensures users only receive answers from documents they have permission to access in the source system.
  • ACL crawling supports:
    • User-level permissions
    • Group-level permissions
    • Inherited permissions (folder hierarchies)
  • Once ACL crawling is enabled, it cannot be disabled — this is a permanent setting.
  • Documents without ACL entries are accessible to all authenticated users by default.

Encryption

  • Encryption at rest — all data in the index is encrypted using AWS KMS keys.
  • Customer Managed Keys (CMK) — supported with Enterprise index type for full key control.
  • Encryption in transit — all communications use TLS 1.2+.
  • Data source credentials stored securely in AWS Secrets Manager.

Network Security

  • Amazon Q Business supports VPC endpoints (AWS PrivateLink) for private connectivity.
  • Data source connections can traverse VPCs for on-premises connectors.
  • All API calls are logged in AWS CloudTrail for auditing.

Subscription Management

  • Amazon Q Business uses a per-user subscription model with charges for both user subscriptions and index capacity.

User Subscription Tiers

Feature Lite Plan ($3/user/month) Pro Plan ($20/user/month)
Ideal for Enterprise-wide deployment, frontline workers Knowledge workers, power users
Q&A on knowledge bases ✅ With citations ✅ With citations
Q&A on LLM knowledge ❌ ✅
File upload to chat ✅ ✅
Content generation ❌ ✅
Amazon Q Apps ❌ ✅
Built-in plugins ❌ ✅
Custom plugins ❌ ✅
Slack/Teams integrations Browser extensions only ✅ Full integrations
QuickSight integration ❌ ✅ Reader Pro
Chat orchestration ❌ ✅
Web experience (SSO) ✅ ✅
Permissions-aware responses ✅ ✅

Index Pricing

Index Type Pricing Included Capacity
Starter $0.14/hour per unit 20,000 docs or 200 MB text, 100 hrs connector usage
Enterprise $0.264/hour per unit 20,000 docs or 200 MB text, 100 hrs connector usage + CMK support

Subscription Billing Details

  • Charges start only after first use by the user.
  • Subscriptions are prorated when created or upgraded (based on remaining days in the month).
  • Cancellations and downgrades are not prorated — they apply at the start of the next billing month.
  • AWS deduplicates subscriptions across Q Business applications sharing the same IAM Identity Center instance — each user is charged only once at their highest subscription level.
  • For IAM Federation, users are charged once per IAM Identity Provider.

Amazon Q Business vs Bedrock Knowledge Bases vs Amazon Kendra

Feature Amazon Q Business Bedrock Knowledge Bases Amazon Kendra
Primary Purpose Enterprise AI assistant (turnkey RAG + actions) Managed RAG for custom AI applications Intelligent enterprise search
Target User Business users & admins (no-code) Developers building AI apps Developers & search admins
Built-in Chat UI ✅ Web experience, browser extensions ❌ (requires custom UI) ❌ (search UI only, needs custom chat)
Data Connectors 40+ managed connectors S3, Confluence, SharePoint, Web Crawler, Google Drive, OneDrive 30+ managed connectors
Retrieval Method Native or Kendra retriever Vector search (OpenSearch, Pinecone, etc.) Semantic + keyword search
LLM Integration Built-in (managed by AWS) Choose any Bedrock FM Requires custom LLM integration
Plugins/Actions ✅ Built-in + custom (OpenAPI) ✅ Via Bedrock Agents ❌
Citizen Developer Apps ✅ Q Apps ❌ ❌
Access Control ACL crawling, IAM Identity Center Metadata filtering ACL crawling, token-based
Admin Guardrails ✅ Topic controls, blocked phrases ✅ Bedrock Guardrails (separate) ❌ (search-level only)
Pricing Model Per user/month + index capacity Per KB storage + retrieval queries Per index hour + connector usage
Best For Rapid enterprise AI assistant deployment Custom RAG applications with specific FMs Enterprise search with NLP ranking
Availability Status Closing to new customers July 31, 2026 (migrate to Amazon Quick) GA, actively developed Closing to new customers (migrate to Quick)

Use Cases

Internal Knowledge Base

  • Connect company wikis, SharePoint, Confluence, and file shares to provide instant answers about policies, procedures, and institutional knowledge.
  • Reduce time employees spend searching across multiple systems.
  • Maintain permissions — users only see information they’re authorized to access.

IT Helpdesk

  • Index IT documentation, runbooks, and knowledge articles from ServiceNow.
  • Use plugins to create/update tickets directly from the chat interface.
  • Automate common L1 support queries (password resets, VPN setup, software installation guides).
  • Escalate complex issues by creating tickets with pre-populated context.

HR Assistant

  • Answer employee questions about benefits, PTO policies, expense procedures, and onboarding.
  • Connect to HR systems via plugins for actions like submitting time-off requests.
  • Reduce HR ticket volume by providing instant self-service answers.
  • Use topic-level controls to block sensitive HR topics (individual salaries, disciplinary actions).

Customer Support (Internal)

  • Equip support agents with instant access to product documentation, troubleshooting guides, and customer history.
  • Reduce average handle time by surfacing relevant solutions in real-time.
  • Create Zendesk/Salesforce tickets with full context directly from the assistant.

Compliance & Legal Q&A

  • Index regulatory documents, compliance policies, audit reports, and legal guidelines.
  • Provide rapid answers about compliance requirements with document citations.
  • Use guardrails to ensure responses don’t constitute legal advice (blocked topic with custom message).
  • Maintain strict access controls — only compliance team members can access sensitive regulatory documents.

Migration to Amazon Quick

  • AWS announced that Amazon Q Business will no longer accept new customers starting July 31, 2026.
  • Existing customers remain fully supported with bug fixes and security updates, but no new features.
  • AWS recommends migrating to Amazon Quick — the next evolution of Q Business with enhanced capabilities.
  • Amazon Quick provides:
    • Quick Flows — workflow automation (replacing Q Apps)
    • QuickSight integration — structured data analysis and visualization
    • Quick Research — in-depth analysis and expert insights
    • Spaces — unified knowledge management
    • MCP (Model Context Protocol) — open standard for connecting to external tools and data sources
  • Migration path: Use Bring Your Own Index (BYOI) to connect existing Q Business index to Quick without disrupting current operations.
  • Q Apps must be manually migrated to Quick Flows.
  • Guardrails and User Store configurations are not included in BYOI — must be recreated in Quick.

AWS Certification Exam Practice Questions

Question 1: A company wants to deploy Amazon Q Business for their 5,000 employees. Frontline workers need basic Q&A access, while 200 knowledge workers need full capabilities including content generation and plugins. What is the most cost-effective subscription approach?

  1. Subscribe all 5,000 users to Pro plan
  2. Subscribe 4,800 users to Lite plan and 200 users to Pro plan
  3. Subscribe all users to Lite plan and upgrade on request
  4. Use anonymous access for all users to avoid subscription costs
Show Answer

Answer: B –

Explanation: The Lite plan ($3/user/month) provides Q&A on knowledge bases with citations and permissions-aware responses, sufficient for frontline workers. The Pro plan ($20/user/month) adds content generation, plugins, Q Apps, and integrations needed by knowledge workers. This gives $14,400/month for Lite users + $4,000/month for Pro users = $18,400/month vs. $100,000/month for all Pro.

Question 2: An organization uses Amazon Q Business with documents stored across SharePoint, Confluence, and S3. A user asks a question, but receives no answer despite the information existing in Confluence. What is the MOST likely cause?

  1. The Confluence connector has not completed its sync schedule
  2. The user does not have ACL permissions to access the Confluence document
  3. Amazon Q Business does not support Confluence as a data source
  4. The Enterprise index type is required for multiple data sources
Show Answer

Answer: B –

Explanation: Amazon Q Business crawls ACLs by default and provides permissions-aware responses. If a user doesn’t have access to a document in the source system (Confluence), Q Business will not include that document in its response, even if the information exists. Option A is possible but less likely if the connector is configured for regular syncs.

Question 3: A company wants to prevent Amazon Q Business from answering questions about competitor pricing and executive compensation. Which feature should the administrator configure?

  1. IAM policies to restrict user access
  2. Global controls with blocked phrases
  3. Topic-level controls with blocked topic behavior
  4. Remove all documents mentioning competitors from data sources
Show Answer

Answer: C –

Explanation: Topic-level controls allow administrators to define natural language topics (e.g., “competitor pricing,” “executive compensation”) and configure blocked behavior with custom response messages. Global blocked phrases only block specific words/phrases in responses, not entire topics. Topic-level controls provide more comprehensive governance over sensitive subjects.

Question 4: A development team wants Amazon Q Business users to create Jira tickets directly from the chat interface when they encounter issues. Which component is needed?

  1. Jira data source connector
  2. Jira built-in plugin
  3. Custom data source connector with Jira API
  4. Amazon Q Apps with Jira integration
Show Answer

Answer: B –

Explanation: The Jira built-in plugin enables users to perform actions (create issues, update status, add comments) in Jira directly from the Q Business chat interface. The Jira data source connector is for indexing/reading Jira content, not performing actions. Plugins enable write operations while connectors enable read/index operations.

Question 5: An organization is evaluating whether to use Amazon Q Business or Amazon Bedrock Knowledge Bases for their enterprise AI assistant. They need a turnkey solution with built-in chat UI, 40+ data connectors, no-code setup, and citizen developer app capabilities. Which service best fits their requirements?

  1. Amazon Bedrock Knowledge Bases with custom UI
  2. Amazon Q Business
  3. Amazon Kendra with custom LLM integration
  4. Amazon Bedrock Agents with Confluence connector
Show Answer

Answer: B –

Explanation: Amazon Q Business provides all requested capabilities: built-in web experience chat UI, 40+ managed data connectors, no-code admin setup, and Q Apps for citizen developers. Bedrock Knowledge Bases requires custom UI development and has fewer native connectors. Kendra provides search but not a conversational AI assistant. Q Business is the fully managed turnkey enterprise AI assistant solution.

Frequently Asked Questions

What is Amazon Q Business?

Amazon Q Business is a fully managed generative AI assistant for enterprises. It connects to 40+ data sources (SharePoint, Confluence, Salesforce, etc.), understands your company’s information, and provides accurate answers with citations while respecting existing access controls.

How much does Amazon Q Business cost?

Q Business Lite costs $3/user/month (Q&A and search only). Q Business Pro costs $20/user/month (includes plugins, actions, Q Apps, and advanced features). There’s also a per-index-unit and document storage charge.

What is the difference between Q Business and Bedrock Knowledge Bases?

Q Business is a ready-to-use enterprise assistant with built-in web UI, 40+ connectors, plugins, and admin controls. Bedrock Knowledge Bases is a developer building block for custom RAG applications that you integrate into your own apps via API.

References

Amazon Q Developer & Q Business – AI Assistants

~ Last updated on : ~ Kiro Agent

Amazon Q – Overview

  • Amazon Q is AWS’s family of generative AI-powered assistants designed for both software development and enterprise business use cases.
  • Amazon Q encompasses two primary products: Amazon Q Developer (for builders) and Amazon Q Business (for enterprises).
  • Amazon Q is built on Amazon Bedrock and leverages foundation models including Anthropic Claude to deliver intelligent, context-aware responses.
  • Amazon Q is available across multiple interfaces: IDEs, CLI, AWS Management Console, and web applications.
  • Amazon Q respects existing identity, roles, and permissions — providing personalized, secure interactions.

Amazon Q Developer

  • Amazon Q Developer is an AI-powered coding assistant that reimagines the entire software development lifecycle (SDLC).
  • Previously known as Amazon CodeWhisperer, it was rebranded and significantly expanded as Amazon Q Developer in April 2024.
  • Supports code generation, debugging, optimization, security scanning, code transformation, documentation generation, and operational troubleshooting.
  • Available in Visual Studio Code, JetBrains IDEs, Visual Studio, Eclipse, and from the command line (CLI).
  • Offers an agentic coding experience — can autonomously read/write files, run shell commands, generate code diffs, and execute multi-step workflows through natural language.
  • Supports Model Context Protocol (MCP) for connecting external tools and MCP servers for context-aware workflows.
⚠️ Important Update (May 2026): AWS announced that Amazon Q Developer IDE plugins and paid subscriptions will reach end-of-support on April 30, 2027. New signups were blocked as of May 15, 2026. The official successor is Kiro — AWS’s spec-driven agentic IDE. Amazon Q Developer continues to be available in the AWS Console, CLI, and through APIs. Existing subscribers retain access until end-of-support.

Code Generation & Inline Completions

  • Provides real-time code suggestions as you type — completing lines, functions, doc strings, and code blocks.
  • Supports 15+ programming languages including Python, Java, JavaScript, TypeScript, C#, Go, Rust, PHP, Ruby, Kotlin, and more.
  • Generates complete functions, classes, and algorithms from natural language comments or partial code.
  • Context-aware: analyzes open files, imports, and project structure for relevant suggestions.
  • Supports up to 200,000 tokens of context with automatic @workspace indexing (Pro tier).
  • Reference tracking — flags when suggestions resemble open-source training data and provides repository/license attribution.
  • Option to suppress public code suggestions to avoid IP concerns.

Agentic Coding

  • Amazon Q Developer agent autonomously performs multi-step software development tasks from natural language instructions.
  • Can implement features, write tests, generate documentation, refactor code, and perform code reviews.
  • Maintains real-time connection with developers — providing updates throughout the process.
  • Reads and writes files locally, generates code diffs, and runs shell commands.
  • Available in VS Code, JetBrains, Visual Studio, and CLI environments.
  • Incorporates developer feedback iteratively to deliver polished implementations.

Debugging & Troubleshooting

  • Identifies bugs, explains error messages, and suggests fixes through conversational chat.
  • Analyzes stack traces, logs, and error patterns to pinpoint root causes.
  • In the AWS Console, the “Diagnose with Amazon Q” feature helps troubleshoot common service errors directly.
  • Accelerates CloudWatch investigations — looks for anomalies in telemetry, surfaces related signals, identifies root-cause hypotheses, and suggests remediation steps.

Code Transformation (Upgrade Agent)

  • Amazon Q Developer agent for code transformation automates language and framework upgrades.
  • Supports Java upgrades from Java 8/11 to Java 17 and Java 21 (added Feb 2025).
  • Supports .NET upgrades and Angular upgrades for modernization.
  • Analyzes existing code, generates a transformation plan, applies code changes, updates libraries/frameworks, and runs tests.
  • Replaces deprecated API calls, upgrades libraries to latest compatible versions.
  • Selective transformation feature allows upgrading specific modules rather than entire applications.
  • Free tier: 1,000 lines of code (LOC) per month; Pro tier: 4,000 LOC per user per month (pooled at account level).
  • AWS internal teams upgraded 1,000+ applications using this capability.

Security Scanning

  • Built-in security vulnerability scanning analyzes code for security issues, secrets exposure, and coding best practice violations.
  • Detects vulnerabilities aligned with OWASP Top 10, CWE, and AWS security best practices.
  • Scans for hardcoded credentials, injection flaws, insecure cryptography, and misconfigurations.
  • Provides remediation suggestions with one-click fix capability.
  • Supports Infrastructure as Code (IaC) analysis for CloudFormation, Terraform, and CDK templates.
  • Integrated into the development workflow — scans run automatically or on-demand.

CLI Integration

  • Amazon Q Developer CLI brings AI assistance directly to the terminal/command line.
  • Provides natural language to command translation — describe what you want in English and get the correct CLI command.
  • Offers inline completions for shell commands (bash, zsh, fish, PowerShell).
  • Supports agentic coding directly from the command line — same capabilities as IDE agents.
  • Console-to-Code feature: record AWS Console actions and generate equivalent CLI commands, CDK, or CloudFormation code.
  • Supported on macOS (Intel/Apple Silicon), Linux, and Windows (WSL).
  • Works in VS Code terminal, JetBrains terminals, iTerm2, Terminal.app, and AWS CloudShell.

IDE Support

  • Visual Studio Code — Full support including agentic coding, inline completions, chat, and MCP.
  • JetBrains IDEs — IntelliJ IDEA, PyCharm, WebStorm, GoLand, CLion, Rider, and more. Agentic coding added June 2025.
  • Visual Studio 2022 — All editions supported with agentic coding capabilities.
  • Eclipse — Available in Preview.
  • GitLab Duo with Amazon Q — Integrated experience for GitLab users.
  • Amazon SageMaker Studio — Native integration for ML development.

Amazon Q Developer Free vs. Pro Tier

Feature Free Tier Pro Tier ($19/user/month)
Agentic Requests (Chat + Coding) 50 per month Increased limits
Code Transformation (Java/.NET) 1,000 LOC/month 4,000 LOC/user/month (pooled)
Admin Dashboard & Controls No Yes (user & policy management)
IP Indemnity No Yes
Reference Tracking Yes Yes
Suppress Public Code Yes Yes
Data Collection Opt-out available Automatically opted out
Identity Center Support IAM / Builder ID IAM Identity Center + Builder ID
Foundation Models Latest Claude models Latest Claude models
Overage (Transformation) N/A $0.003 per LOC beyond allocation

Amazon Q in the AWS Console

  • Amazon Q Developer is embedded directly in the AWS Management Console as a chat assistant.
  • Helps answer questions about AWS services, architecture, best practices, and billing.
  • Provides agentic capabilities (added June 2025) — functions as a resource analysis and operational troubleshooting assistant.
  • Can consult multiple information sources to resolve complex queries about your AWS environment.
  • Diagnose with Amazon Q — click button next to console errors to get AI-powered diagnosis and resolution steps.
  • Supports table and chart visualizations in responses.
  • Available in the Console, AWS Console Mobile Application, AWS Chatbot (Slack/Teams), and AWS documentation pages.
  • FinOps capabilities — answers cost-related questions, analyzes spending patterns, and provides optimization recommendations (50 queries/month free).
  • Console chat interactions are governed by Free Tier limits for all users; no Pro subscription required for console Q&A.

Amazon Q Business

  • Amazon Q Business is a fully managed generative AI-powered assistant for enterprise knowledge management, content generation, and workflow automation.
  • Delivers quick, accurate, and relevant answers to business questions by connecting to enterprise data sources.
  • Uses Retrieval Augmented Generation (RAG) over company data — synthesizes information from multiple sources with citations.
  • Respects existing access control lists (ACLs) — provides permission-aware responses based on user identity.
  • Requires AWS IAM Identity Center for user authentication and access management.

Data Source Connectors

  • Amazon Q Business supports over 40 data source connectors to popular enterprise applications:
  • Collaboration & Productivity: Microsoft SharePoint (Cloud/Server), OneDrive, Teams, Google Drive, Gmail, Google Calendar, Dropbox, Box
  • Knowledge Management: Confluence (Cloud/Server), Notion, Zendesk
  • Project Management: Jira, Asana (Preview)
  • Developer Tools: GitHub (Cloud/Server)
  • Databases & Storage: Amazon S3, Amazon FSx Windows, Amazon RDS, Amazon Aurora
  • CRM & Service: Salesforce, ServiceNow
  • Communication: Slack, Microsoft Exchange
  • Web: Amazon Q Web Crawler (crawl any website)
  • Custom: Amazon Q Business Custom Data Source Connector for any proprietary source
  • Connectors index ACL information along with documents — ensuring users only see data they’re authorized to access.
  • Supports configurable sync schedules, field mappings, and VPC connectivity for on-premises sources.

Plugins & Actions

  • Amazon Q Business provides a library of over 50 built-in actions across popular business applications.
  • Plugins enable employees to take direct actions within enterprise applications through the Q Business interface.
  • Examples: create/update Jira tickets, change ServiceNow ticket priorities, move issues to sprint, manage calendar events.
  • Eliminates context-switching between different enterprise systems.
  • Administrators install and configure plugins; actions are automatically orchestrated during user chat.
  • Built-in plugins include: Jira, ServiceNow, Salesforce, Zendesk, PagerDuty, and more.
  • Custom plugins can be created using OpenAPI specifications.

Admin Controls & Guardrails

  • Topic blocking — administrators can define topics that Amazon Q should not respond to.
  • Content guardrails — filter harmful/inappropriate responses, control response generation behavior.
  • Global controls — configure whether Q automatically orchestrates across plugins and data sources or requires explicit user selection.
  • Blocked phrases — specify exact phrases that should never appear in responses.
  • PII redaction — automatically redact sensitive personal information from responses.
  • Response scope — limit responses to only information found in connected enterprise data (no general knowledge).
  • User and group management — control access at user/group level through IAM Identity Center integration.
  • All data remains within the customer’s AWS account; Amazon Q Business does not use customer data to train models.

Amazon Q Apps

  • Amazon Q Apps is a no-code/low-code capability that lets business users create custom generative AI applications.
  • Users can create apps from natural language descriptions or conversation prompts — no coding required.
  • Apps leverage the same enterprise data connections and permissions as the parent Q Business environment.
  • Use cases: automated report generators, knowledge Q&A bots, content creation tools, data summarizers.
  • Apps can be shared across the organization through an internal app library.
  • Available exclusively to Amazon Q Business Pro subscribers ($20/user/month).
  • Administrators control which users can create and publish Q Apps.

Amazon Q Business Pricing

Feature Lite ($3/user/month) Pro ($20/user/month)
Q&A / Chat Yes (permission-aware) Yes (full suite)
Content Generation Basic Full (summaries, reports, emails)
Amazon Q Apps No Yes
Amazon Q in QuickSight No Yes (Reader Pro)
Plugins & Actions No Yes (50+ actions)
Admin Controls & Guardrails Basic Full
Data Source Connectors Yes (40+ connectors) Yes (40+ connectors)
Index Types Starter & Enterprise Starter & Enterprise

Note: Index units are charged separately based on data storage and processing capacity needs.

Amazon Q vs. Competitors

Feature Amazon Q Developer GitHub Copilot ChatGPT Enterprise
Primary Focus AWS-native development & operations Universal code completion & generation General-purpose AI (coding + business)
Pricing (Individual) Free / $19/user/month Pro Free / $10/month Pro / $39/month Pro+ Custom enterprise pricing
Pricing (Team/Business) $19/user/month $19/user/month Business / $39 Enterprise Volume-based (contact sales)
IDE Support VS Code, JetBrains, Visual Studio, Eclipse VS Code, JetBrains, Neovim, Xcode, Eclipse+ Web-based (no IDE plugin)
CLI Support Yes (native terminal integration) Yes (Copilot CLI) No
Security Scanning Built-in (code + IaC) Via GitHub Advanced Security (separate) No built-in scanning
Code Transformation Yes (Java, .NET, Angular upgrades) No dedicated transformation agent No
Cloud Integration Deep AWS (Console, CloudWatch, IAM) GitHub ecosystem, multi-cloud Plugins/GPTs for various services
IP Indemnity Yes (Pro tier) Yes (Business/Enterprise) Yes (Enterprise)
Foundation Models Anthropic Claude (via Bedrock) GPT-4o, Claude 3.5, Gemini 1.5 Pro GPT-4o, GPT-4 Turbo
Context Window Up to 200,000 tokens Up to 128,000 tokens 128,000 tokens
Enterprise Data RAG Yes (Q Business — separate product) Knowledge bases (Enterprise tier) Yes (company knowledge, GPTs)
Best For AWS-centric teams, cloud operations Multi-cloud/multi-language teams General business + coding tasks

Key Differentiators for Amazon Q

  • AWS-native integration — deep integration with Console, CloudWatch, IAM, and 200+ AWS services. No other tool offers built-in IAM policy generation.
  • Code transformation agents — unique capability for automated Java/.NET upgrades at scale.
  • Built-in security scanning — IaC analysis and vulnerability detection included in the same tool.
  • Operational troubleshooting — can diagnose AWS infrastructure issues directly in the Console.
  • Cost: competitive at $19/month — same as GitHub Copilot Business with AWS-specific features included.
  • Lowest latency in-region — 212ms p95 latency for AWS-hosted workloads.

Amazon Q — Complete Pricing Summary

Product Tier Price Key Inclusions
Q Developer Free $0 50 agentic requests/month, 1K LOC transformation, Claude models
Q Developer Pro $19/user/month Increased limits, 4K LOC, IP indemnity, admin controls
Q Business Lite $3/user/month Q&A, permission-aware responses, 40+ connectors
Q Business Pro $20/user/month Full suite, Q Apps, QuickSight, plugins, guardrails
Q in Connect — $40/agent/month Contact center AI assistant (Amazon Connect)

AWS Certification Exam Relevance

  • AWS Certified AI Practitioner (AIF-C01) — Amazon Q is a key service. Understand Q Developer vs Q Business positioning, RAG concepts, and how Q Business connects to enterprise data.
  • AWS Certified Machine Learning Engineer – Associate (MLA-C01) — Know Amazon Q Developer’s role in ML development workflows, integration with SageMaker Studio.
  • AWS Certified Solutions Architect – Associate/Professional — Understand Q Business architecture: connectors, RAG pattern, IAM Identity Center requirement, data security model.
  • AWS Certified Developer – Associate — Q Developer capabilities for code generation, security scanning, debugging, and CI/CD integration.
  • AWS Certified DevOps Engineer – Professional — Code transformation agents, operational troubleshooting, CloudWatch integration, Console-to-Code.
  • Key Exam Concepts:
    • Amazon Q Business uses RAG (Retrieval Augmented Generation) over enterprise data
    • Access controls are inherited from source systems (ACL-aware)
    • IAM Identity Center is required for Q Business
    • Q Developer Free tier uses Builder ID; Pro tier supports Identity Center
    • Q Business does NOT use customer data to train foundation models
    • Q Developer provides IP indemnity only in Pro tier

Amazon Q — Evolution & Roadmap

  • 2023 (Preview) — Amazon Q announced at re:Invent 2023 as a unified AI assistant for AWS.
  • April 2024 (GA) — Amazon Q generally available; CodeWhisperer rebranded to Amazon Q Developer.
  • 2024-2025 — Added agentic coding, MCP support, .NET/Angular transformation, Console-to-Code, GitLab integration.
  • Feb 2025 — Java 21 upgrade support added to transformation agent.
  • June 2025 — Agentic capabilities in AWS Console; agentic coding in JetBrains and Visual Studio.
  • May 2026 — IDE plugin end-of-support announced (April 2027). Kiro announced as successor for IDE/agentic coding.
  • Going forward — Q Developer continues in Console, CLI, and APIs. Kiro takes over IDE-based development. Q Business continues expanding enterprise capabilities.

AWS Certification Exam Practice Questions

  • Questions are collected from Internet and the answers are marked as per my knowledge and understanding (which might differ with yours).
  • AWS services are updated everyday and both the answers and questions might be outdated soon, so research accordingly.
  • AWS exam questions are not updated to keep up the pace with AWS updates, so even if the underlying feature has changed the question might not be updated
  • Open to further feedback, discussion and correction.
  1. A company wants to deploy a generative AI assistant that can answer employee questions using internal documentation stored in Confluence, SharePoint, and Amazon S3. The assistant must respect existing document-level permissions. Which AWS service should be used?
    1. Amazon Q Developer
    2. Amazon Q Business
    3. Amazon Bedrock Knowledge Bases
    4. Amazon Kendra

    Explanation: Amazon Q Business is designed for enterprise knowledge retrieval with RAG over company data. It supports 40+ connectors including Confluence, SharePoint, and S3, and respects document-level ACL permissions. Amazon Q Developer is for coding assistance. While Bedrock Knowledge Bases can also do RAG, Q Business provides the fully managed enterprise assistant experience with built-in connectors and permission awareness.

  2. A development team is evaluating Amazon Q Developer Pro for their organization. Which of the following features are available ONLY in the Pro tier and NOT in the Free tier? (Choose TWO)
    1. Reference tracking for code suggestions
    2. IP indemnity for generated code
    3. Security vulnerability scanning
    4. Administrative dashboard with user and policy management
    5. Ability to suppress public code suggestions

    Explanation: IP indemnity and admin dashboard/policy management are Pro-tier only features. Reference tracking and suppressing public code suggestions are available in both Free and Pro tiers. Security scanning is available in both tiers.

  3. A Solutions Architect needs to understand the authentication requirements for Amazon Q Business. Which statement is correct?
    1. Amazon Q Business supports IAM users directly for end-user access.
    2. Amazon Q Business requires Amazon Cognito User Pools for authentication.
    3. Amazon Q Business requires AWS IAM Identity Center for user authentication and access management.
    4. Amazon Q Business can use any SAML 2.0 identity provider directly without IAM Identity Center.

    Explanation: Amazon Q Business requires AWS IAM Identity Center for managing user authentication and access. IAM Identity Center can federate with external identity providers (Okta, Azure AD, etc.) via SAML 2.0, but the integration point for Q Business is always through IAM Identity Center.

  4. A company is using Amazon Q Developer to modernize their Java applications. They have 50 Pro tier subscriptions and need to upgrade 250,000 lines of code this month. What will be the transformation overage charge?
    1. $0 — all within allocation
    2. $50
    3. $150
    4. $750

    Explanation: With 50 Pro subscriptions, the pooled allocation is 50 × 4,000 = 200,000 LOC/month. Usage is 250,000 LOC, so overage is 50,000 LOC. At $0.003/LOC: 50,000 × $0.003 = $150.

  5. Which Amazon Q product allows business users to create custom generative AI applications without writing code, using natural language descriptions?
    1. Amazon Q Developer agents
    2. Amazon Q in QuickSight
    3. Amazon Q Apps
    4. Amazon Bedrock Agents

    Explanation: Amazon Q Apps is a no-code capability within Amazon Q Business (Pro tier) that allows business users to create custom GenAI applications from natural language descriptions. These apps leverage the same enterprise data connections and permissions. Q Developer agents are for software development tasks. Bedrock Agents require developer setup.

Frequently Asked Questions

What is Amazon Q Developer?

Amazon Q Developer is an AI-powered coding assistant that generates code, debugs issues, transforms legacy applications (Java 8→17, .NET to cross-platform), scans for security vulnerabilities, and provides CLI assistance — available in IDEs and the AWS Console.

What is the difference between Q Developer and Q Business?

Q Developer is for software development tasks (coding, debugging, AWS CLI help). Q Business is an enterprise AI assistant for business users that answers questions using company data via 40+ connectors to internal systems like SharePoint, Confluence, and Salesforce.

How much does Amazon Q cost?

Q Developer Free tier includes limited code suggestions. Q Developer Pro is $19/user/month with full agentic capabilities. Q Business Lite is $3/user/month (Q&A only) and Q Business Pro is $20/user/month (with plugins and actions).

Related Posts

References