Amazon Details Security Features for Amazon Quick
Amazon has outlined Smart Approvals and Deny by Default features for Amazon Quick to manage AI agent oversight and permissions.
In 30 seconds
Amazon Web Services has published documentation detailing two governance and security features for Amazon Quick: Smart Approvals, which uses automated review to reduce routine prompts while preserving human oversight, and Deny by Default, which restricts AI capabilities upon release unless explicitly allowed.
Managing AI Agent Oversight and Permissions in Amazon Quick
Amazon Web Services has detailed the operation of Smart Approvals and Deny by Default within Amazon Quick, aiming to balance automated efficiency with administrative security controls.[1][2] Smart Approvals evaluates eligible agent actions against a user's request and conversation context, automatically approving low-risk tasks while routing consequential actions to a person.[1][3]
Smart Approvals is available in the Amazon Quick desktop and mobile applications, though it is not currently available in the web version.[3] The feature is enabled by default, but administrators can use custom permissions profiles to control access, and individual users can turn it off for themselves.[1][3]
Deny by Default and Capability Restrictions
Without Deny by Default, any new capability shipped by Amazon Quick is automatically available to all users upon release, requiring manual restrictions.[2] With Deny by Default enabled in a custom permissions profile, new capabilities in a restricted category are automatically denied on launch day unless explicitly allowed by administrators.[2]
Auditing and Enforcement
Amazon Quick records permission updates and Smart Approvals activity in AWS CloudTrail, while chat logs and agent metadata are delivered to Amazon CloudWatch Logs.[1][3] All API operations use Amazon QuickSight naming conventions.[2]
Evidence and Scope
The scope and real-world impact of the issue have not been independently confirmed. No independent reporting on this development has been found yet.
Timeline
- Amazon Web Services publishes[1]
- First detected by AI Newsroom
- Verification completed
Sources
- [1]Amazon Web ServicesPrimary sourceNov 4, 2026Smart Approvals in Amazon Quick: Human oversight where it matters
- [2]AmazonPrimary sourceDeny by Default - Amazon Quick
- [3]AmazonPrimary sourceSmart Approvals - Amazon Quick
How this article was produced
This article was researched and written by AI Newsroom’s automated editorial system using a large language model, constrained to cited evidence and checked by an automated quality gate. No human journalist wrote it.
This version was published automatically after passing quality checks, without human review.
- AI Newsroom Automated Desk
- Language model: gemini / gemini-3.5-flash-lite
- Prompt version
- article-draft-2026-11-07.2
Related coverage
Amazon Announces General Availability of Web Answer on Bedrock AgentCore
Amazon Web Services has announced the general availability of Web Answer on Amazon Bedrock AgentCore, offering developers a managed connector for agentic web search and citation synthesis. Alongside this launch, AWS outlined advanced enterprise governance architectures integrating Okta Cross App Access, AgentCore Gateway, and Cedar policies.
Amazon SageMaker Adds Support for NVIDIA Multi-Instance GPU Partitioning
Amazon SageMaker Inference now supports NVIDIA Multi-Instance GPU (MIG) partitioning, allowing users to divide a single physical GPU into independent partitions. This feature enables organizations to host multiple models on one accelerator with hardware-enforced isolation, improving utilization and reducing inference costs.
AWS Details Serverless MCP Server Architecture for Data Lake Access
Amazon Web Services has published an architectural guide for building a serverless Model Context Protocol server on Amazon ECS Fargate. The design aims to provide AI agents with metadata-driven access to enterprise data lakes without requiring custom per-dataset integration code.
Security & Reliability