AWS First Steps
New feature

Amazon Quick adds deny by default for custom permissions

Amazon Quick introduces a deny-by-default setting for custom permissions, allowing administrators to restrict AI capability categories in profiles applied to users, roles, or entire accounts

Amazon Quick now includes a deny-by-default setting for custom permissions. This governance feature allows administrators to restrict AI capability categories within a custom permissions profile and assign it to users, roles, or the entire account. Quick then automatically denies any new AI capability at launch for those users. Restricting a category also restricts existing capabilities within it. Administrators must explicitly allow each capability when ready. The restriction applies only to the configured profile. Configure deny-by-default in Manage account in Amazon Quick or via the AWS CLI. This feature is available in all AWS Regions where Amazon Quick is offered.

Why it matters

This update targets administrators who need tighter control over AI capability access. It prevents users from immediately accessing new AI features in Amazon Quick, allowing administrators to grant access when ready

Read the original AWS announcement

Related articles and terms

Practical Use Cases for Amazon Quick - Department-Specific Scenarios and Workflow Automation Design PatternsExplore concrete use cases for sales, IT, and finance departments, along with design patterns for notifications, approvals, and multi-step workflows using Quick Flows.Amazon QuickAn agentic digital workspace that handles everything from answering questions to executing actionsIAM Policy Evaluation Logic Explained - How Implicit Deny Loses to Explicit AllowA step-by-step explanation of how IAM evaluates requests to allow or deny them, covering the priority of implicit deny, explicit allow, and explicit deny, as well as intersection logic for SCPs, permission boundaries, and session policies.AWS IAMAn authentication and authorization service for securely controlling access to AWS resources, providing fine-grained access management through users, groups, roles, and policiesDesigning Identity and Access Management - Achieving Zero Trust Security with IAMLearn access management design techniques with AWS IAM, including the principle of least privilege, policy design, and achieving zero trust security through Cognito integration.