Amazon Q

1. 01Amazon Q trains on data unless a business tier or opt-out is used. Verify which tier these users are on.
2. 02Set the AI services opt-out policy in AWS Organizations so Amazon Q cannot use your content to improve the service, then confirm Q Developer users are on Pro rather than the free tier.

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

1. cloudtrail_activity · Sep 13, 2026
   AWS (demo) (123456789012): Amazon Q, 30 CloudTrail events by 5 identities, 14 write, 28 invocations, 1 resource in 90 days across us-east-1
   Detail

   {
     "services": [
       "codewhisperer.amazonaws.com",
       "qbusiness.amazonaws.com"
     ],
     "topActions": [
       {
         "name": "GenerateRecommendations",
         "count": 16
       },
       {
         "name": "ChatSync",
         "count": 12
       },
       {
         "name": "CreateApplication",
         "count": 1
       },
       {
         "name": "CreateDataSource",
         "count": 1
       }
     ],
     "invocationLogging": null
   }

2. qbusiness:application
   application 'Contoso Knowledge Assistant' in us-east-1
   Detail

   {
     "arn": "arn:aws:qbusiness:us-east-1:123456789012:application/QAPP001",
     "status": "ACTIVE"
   }