Amazon Q for Business - Conversation log extraction

The CloudTrail events will not capture the content for the Conversation between User and Amazon Q Business service due to the following:

• Size of the event
• Security and Data confidentiality as the conversation may contain sensitive information

The Amazon Q Business API provides a mechanism to explicitly list Conversation and Messages contained in them. Please see the following links for detail:

• https://docs.aws.amazon.com/amazonq/latest/api-reference/API_ListConversations.html
• https://docs.aws.amazon.com/amazonq/latest/api-reference/API_ListMessages.html

Please see the following GitHub link for an example to use ListConversations API call:

• https://github.com/didier-durand/qstensils/blob/main/doc/q_list_conversations.md

Please note that the Amazon Q Business service is now General Available and it is a hard requirement to use IAM Identity Center (IdC). This means that the ListConversations API call will no longer allow you to simply supply the user-id. Instead, we need use a session token. Please see the below GitHub repository for an example of how this can be done:

• https://github.com/aws-samples/custom-web-experience-with-amazon-q-business