Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Preferences
Contact Us
Feedback
AWS Documentation
Create an AWS Account

Accessing a customer's Amazon Q index as a data accessor using cross-account access

PDF
RSS
Focus mode
Accessing a customer's Amazon Q index as a data accessor using cross-account access - Amazon Q Business

After Amazon Q Business customers give an independent software provider or vendor's (ISV) data accessor permissions to retrieve data from their Amazon Q index, AWS or the ISV must reach out the Amazon Q customer to source the following configuration parameters. These configuration parameters are required inputs when they use the SearchRelevantContent API operation to perform cross-account access to relevant data from the customer's Amazon Q index. These parameters are accessed from the customer's AWS Management Console.

  1. Amazon Q Business application ID — This is unique identifier of the Amazon Q Business application environment. It tells the ISV what Amazon Q application environment is associated with the Amazon Q index.

  2. The Amazon Q Business application Region — This is the AWS Region where the Amazon Q Business application environment is created.

  3. Amazon Q Business retriever ID — This is unique identifier for the retriever. The retriever gets the data from the Amazon Q index configured by the Amazon Q customer.

  4. Data accessor application ARN — This is the ISV Amazon Resource Name (ARN). It is used to identify the ISV when it is accessing a customer's Amazon Q index.

  5. The Region for the Identity and Access Management (IAM) Identity Center (IDC) instance — This is the AWS Region where the IDC instance of the customer has been created.

With these parameters, the ISV can begin retrieving content from the Amazon Q index by calling the SearchRelevantContent API operation. The SearchRelevantContent API operation follows Amazon Q Business access control standards by only retrieving data that the customer's end users have been given access to.

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.