Harness Amazon Q Business power with Microsoft workload data sources (XNT302)

Key Takeaways

Challenges of AI Chat Applications in the Enterprise

  1. Lack of Context: AI chat applications may not have knowledge about the business, company, customer segments, or industry.
  2. Security: AI chat assistants may not have appropriate access controls to sensitive information.
  3. Data Privacy: AI chat assistants may inadvertently expose sensitive user data like financial or health information.
  4. Compliance: Security and privacy concerns often lead to bans on popular AI applications in the enterprise.

Introduction to Amazon Q Business

  1. Amazon Q Business is a generative AI-powered chat assistant that provides secure and accurate answers based on enterprise data.
  2. Users can perform automated custom tasks using plugins in Amazon Q Business, such as updating a feature request or creating a service ticket.
  3. Q Business respects user permissions and access controls, ensuring users can only access data they are authorized to view.
  4. Q Business connects to over 40 different enterprise-level data sources, including Microsoft products like SharePoint and Amazon FSX for Windows File Server.
  5. Admins can create guardrails and customize access controls and topic controls for Q Business responses.

Integrating Microsoft Data Sources with Amazon Q Business

  1. Ingestion: Q Business can scan data sources and establish which documents to crawl, then process the text into its index.
  2. Permissions: Q Business ingests metadata about user and group identities to ensure data is only accessible to those with appropriate permissions, respecting NTFS and SharePoint permissions.
  3. Enhancement: Q Business can map document attributes to fields in its index, allowing users to filter and scope their chat results.

Securing Data with Amazon Q Business

  1. Q Business respects the access control lists (ACLs) found within the data sources, ensuring users can only access data they have permissions for.
  2. Q Business synchronizes users and groups from Microsoft Active Directory into AWS IAM Identity Center to enable permission-based filtering of responses.
  3. Q Business logs each data source crawl event to Amazon CloudWatch Logs, providing visibility into the permissions being used.

Amazon Q Apps

  1. Q Apps allow you to build lightweight applications on top of Q Business, automating common tasks like generating job descriptions or financial summaries.
  2. Q Apps are built by describing the application logic, and can be published and shared with other users in the organization.
  3. Q Apps inherit the same security guardrails and data source connections as the core Q Business application.

Demonstration

  1. The demo showed the process of configuring an Amazon FSX for Windows File Server and a SharePoint Server data source in Q Business.
  2. It demonstrated how Q Business respects the permissions configured in the underlying data sources, providing different responses to users with different access levels.
  3. The demo also showcased the creation of a Q App to automate the process of matching job candidates to job descriptions, leveraging the enterprise data sources.
  4. Finally, the demo illustrated the use of topic-specific controls in Q Business to block access to sensitive financial information for non-authorized users.

Your Digital Journey deserves a great story.

Build one with us.

Cookies Icon

These cookies are used to collect information about how you interact with this website and allow us to remember you. We use this information to improve and customize your browsing experience, as well as for analytics.

If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference.

Talk to us