Ref: https://www.udemy.com/course/aws-ai-practitioner-certified/learn/lecture/44886505

• Contents:

Amazon Q Business - Overview

• 🔧 Fully-managed GenAI assistant for your employees
  • ❗ Uses company's internal data & knowledge
  • Built on top of Amazon Bedrock (but you can't choose underlying FMs)
• 💡 NOTE: Setting up Amazon Q Business is a bit tedious process compared to other AWS services
• Diagram

Amazon Q Business - Integrations

• Data connectors (fully-managed RAG) can access/crawl many data sources:
  • AWS resources: S3, RDS, Aurora, WorkDocs…
  • External to AWS: Microsoft 365, Salesforce, GDrive, Gmail, Slack, Sharepoint…
• Plugins allow to interact with 3rd-party SaaS products:
  • Jira, ServiceNow, Zendesk, Salesforce…
• Diagram

IAM integration

• User authentication through IAM Identity Center for employees
  • Allows Web Identity Federation (i.e. authentication via external IDPs like Google, Microsoft AD…)
• Permissions segregate data by sensitivity → users receive responses generated only from documents they have access to
• Diagram

Amazon Q Business - Admin Controls

• 💡 Similar to Bedrock Guardrails
• Control and customize responses for organizational needs:
  • Block specific words or topics
  • Respond with internal info only, or allow use of external knowledge gathered by FM
  • …other granular rules (e.g. global controls, topic-level controls…)