AWS adds Smart Approvals controls to Amazon Quick

AWS has added Smart Approvals to Amazon Quick. The company says the control uses a separate classifier to decide whether an eligible agent action can proceed once or must return to the user for review. It operates behind Quick’s existing permissions and does not expand what an agent or user is allowed to do.

That boundary keeps policy denials blocked and sends actions configured for mandatory human approval to a person. AWS says Quick checks permissions, custom permissions, guardrails, connector action permissions and user settings before the classifier sees an action.

The Amazon Quick user guide narrows eligibility further. Smart Approvals reviews an action only when the connector author has selected “Let user choose” and the user has selected “Ask each time.” An “Always Ask” action goes directly to the user; an “Always Allow” action proceeds without Smart Approvals review.

For an eligible action, AWS says the classifier compares the proposed operation with the user’s request and a bounded view of the conversation. It considers what the action does, where data would go and who would be affected. AWS lists external sharing, permission changes, deletion or overwriting of records, and payments as examples of consequential actions that should be referred to the user, while noting that context also affects the decision.

According to AWS, an automatic approval is single-use and covers only the exact action and parameters reviewed. It creates no continuing permission. If the classifier declines to approve an action, or if the review times out or otherwise fails, the action returns to the user. A failed review does not grant automatic approval.

AWS also warns that the model can make mistakes. The company advises administrators to enforce any action that must always receive human review through connector action permissions instead of relying on classifier judgment.

AWS says Smart Approvals is enabled by default, although administrators can restrict access with custom permissions. Permitted users can also turn it off across conversations and scheduled runs. When it is off, otherwise eligible actions wait for the user’s review.

AWS says CloudTrail records Smart Approvals approval events and changes to user settings. The documentation cautions that an approval event does not prove the underlying action ran. Smart Approvals is available in the Amazon Quick desktop and mobile apps, but the user guide says it is not currently available in the web version.