Creating a sample Amazon Q Business application

Sign in to the AWS Management Console and open the Amazon Q Business console.

From the How it works menu, from Experiment with a sample – optional, choose Try quick application.

On the Create application page, for Application settings, enter the following information for your Amazon Q Business application:

In Service access, for Choose a method to authorize Amazon Q Business, choose from the following options:

For Encryption – Amazon Q Business encrypts your data by default using AWS managed AWS KMS keys. To customize your encryption settings, select Customize encryption settings (advanced). Then, you can choose to use an existing AWS KMS key or create a new one.

For Access management method – choose IAM Identity Center.

In Advanced IAM Identity Center settings, activate Enable cross-region calls to access resources to allow Amazon Q Business to connect to an IAM Identity Center instance that exists in a region not already supported by Amazon Q Business. For more information, see Creating a cross-region IAM Identity Center integration.

In Connect Amazon Q Business to IAM Identity Center, you will see the following options based on whether you have an IAM Identity Center instance already configured, or need to create one.

Tags – optional – To add tags to your Amazon Q Business application environment and web experience, select Add new tag. Then, enter the following information for each tag:

For more information about using tags with Amazon Q Business, see Tags.

To start creating your application, choose Create.

To add users or groups, from Manage access, select the Users or Groups tab, then select Add groups and users. Then, depending on how you're integrating Amazon Q Business with IAM Identity Center, do the following:

1. If you're using a pre-configured IAM Identity Center instance with users and groups already configured, Amazon Q Business detects the users you have configured in IAM Identity Center. You can choose to assign users from your IAM Identity Center directory.

   1. In this case, in the Add or assign users and groups dialog box that opens, select Assign existing users and groups. Then, select Next.

   2. Then, in the Assign users and groups dialog box that opens, type and select the name of the user or group that you want to assign. Then select Assign.

      Note

      Search for users using their name, and not their user ID or email alias.

   3. From the Users page, After Amazon Q Business finishes assigning the user to your application, select the subscription type to assign to your user from Current subscription.

      Note

      The default subscription type assigned to a user is Q Business Pro.

      Important

      If you add a user to a group in IAM Identity Center and have given that group access to your application, it can take up to 24 hours for the change to take effect and for the user to be able to access your Amazon Q Business application.

2. If you've created a minimally-configured IAM Identity Center instance from within the Amazon Q Business console for your Amazon Q Business application, you can enter the details of your users or users within a group to add them to your application environment and IAM Identity Center instance.

   1. In this case, in the Add new users dialog box that opens, enter the details of your user. Then select Next and Add.

      If you want to add another user or multiple users, select Add new user and enter the user details before you select Add. Then, select Assign.

      The user is automatically added to an IAM Identity Center directory.

   2. The details you must enter for a single user include:

      • Username – A username is required for an user to sign into the AWS access portal. You can't change the username later. Maximum length 128 characters. Can only contain alphanumeric characters or any of the following: +=,.@-_

      • First name – First name of user.

      • Last name – Last name of user.

      • Email address – Email address of user.

      • Confirm email address – Enter email address again to confirm it.

      • Display name – The display name assigned to your user.

In Web experience service access, enter the following information:

Select Done.

Sign in to the AWS Management Console and open the Amazon Q Business console.

Complete the steps to create your Amazon Q Business application.

Then, from the Amazon Q Business application environment page, select your application, and then select Customize web experience.

In Customize web experience, from the right navigation pane, select Customize web experience.

In Customize web experience, enter the following information for your web experience:

Choose Save.