Amazon's New Controls Decide Who Gets to See Company Data

Amazon just explained how companies can automatically control what each person is allowed to do inside Amazon Quick, its business-intelligence tool — the software many organizations use to build dashboards, charts, and now AI-written reports. The problem it solves: as AI features let ordinary staff pull, summarize, and export far more data than before, someone has to decide who is allowed to do what. Doing that by hand, person by person, doesn't scale.

The practical upshot is that your employer can hand out access more precisely — and less accidentally. The blog gives examples: financial analysts can write reports but are blocked from downloading the raw data behind them, and outside partners can look at dashboards without ever seeing the sharing controls. For you, that could mean faster access on day one instead of a week-long IT ticket, and less chance that your team's data ends up somewhere it shouldn't.

The mechanics are simpler than they sound. Permissions live at three levels — the whole account, a job role, or one individual — and a more specific setting always wins. Amazon describes four ways to set them: at the moment a user is created, as a company-wide default for current and future staff, automatically when someone joins a group, or via a cleanup script for workers who were set up before any of this existed. A large company, for instance, can block all new AI features for everyone until its security team finishes a 60-to-90-day review.

The catch: this is plumbing for IT departments, not a consumer product. It only governs Amazon Quick, requires some technical setup, and getting it wrong can lock the wrong people out or leave dangerous defaults in place. It also can't un-share anything already exported.