apache
diff --git a/‎backend/plugins/q_dev/Q_DEV_deploy_guide.md
Lines changed: 13 additions & 0 deletions b/‎backend/plugins/q_dev/Q_DEV_deploy_guide.md
Lines changed: 13 additions & 0 deletions
diff --git a/‎backend/plugins/q_dev/README.md
Lines changed: 11 additions & 2 deletions b/‎backend/plugins/q_dev/README.md
Lines changed: 11 additions & 2 deletions
diff --git a/‎backend/plugins/q_dev/api/connection.go
Lines changed: 49 additions & 3 deletions b/‎backend/plugins/q_dev/api/connection.go
Lines changed: 49 additions & 3 deletions
@@ -59,6 +59,19 @@ Update the following variables in the `.env` file:
 - `DB_URL`: Replace `mysql:3306` with `127.0.0.1:3306`
 - `DISABLED_REMOTE_PLUGINS`: Set to `True`
 
+### Q Developer Plugin Configuration
+The Q Developer plugin requires AWS credentials with access to both S3 and IAM Identity Center:
+
+**Required AWS Permissions:**
+- S3: `s3:GetObject`, `s3:ListBucket` for the Q Developer data bucket
+- Identity Center: `identitystore:DescribeUser` for user display name resolution
+
+**Required Configuration Fields:**
+- AWS Access Key ID and Secret Access Key
+- S3 bucket name and region
+- IAM Identity Center Store ID (format: `d-xxxxxxxxxx`)
+- IAM Identity Center region
+
 ### Start MySQL and Grafana Containers
 
 Make sure the Docker daemon is running before this step.
 
@@ -17,12 +17,13 @@ limitations under the License.
 
 # Q Developer Plugin
 
-This plugin is used to retrieve AWS Q Developer usage data from AWS S3, and process and analyze it.
+This plugin is used to retrieve AWS Q Developer usage data from AWS S3, process and analyze it, and resolve user display names through AWS IAM Identity Center.
 
 ## Features
 
 - Retrieve CSV files from a specified prefix in AWS S3
 - Parse user usage data from CSV files
+- Resolve user UUIDs to human-readable display names via AWS IAM Identity Center
 - Aggregate data by user and calculate various metrics
 
 ## Configuration
@@ -34,6 +35,8 @@ Configuration items include:
 3. AWS Region
 4. S3 Bucket Name
 5. Rate Limit (per hour)
+6. IAM Identity Center Store ID
+7. IAM Identity Center Region
 
 You can create a connection using the following curl command:
 ```bash
@@ -45,6 +48,8 @@ curl 'http://localhost:8080/plugins/q_dev/connections' \
     "secretAccessKey": "<YOUR_SECRET_ACCESS_KEY>",
     "region": "<AWS_REGION>",
     "bucket": "<YOUR_S3_BUCKET_NAME>",
+    "identityStoreId": "<YOUR_IDENTITY_STORE_ID>",
+    "identityStoreRegion": "<YOUR_IDENTITY_CENTER_REGION>",
     "rateLimitPerHour": 20000
 }'
 ```
@@ -53,6 +58,8 @@ Please replace the following placeholders with actual values:
 <YOUR_SECRET_ACCESS_KEY>: Your AWS secret access key
 <YOUR_S3_BUCKET_NAME>: The S3 bucket name you want to use
 <AWS_REGION>: The region where your S3 bucket is located
+<YOUR_IDENTITY_STORE_ID>: Your IAM Identity Center Store ID (format: d-xxxxxxxxxx)
+<YOUR_IDENTITY_CENTER_REGION>: The region where your Identity Center is deployed
 
 You can get all connections using the following curl command:
 ```bash
@@ -64,7 +71,7 @@ curl Get 'http://localhost:8080/plugins/q_dev/connections'
 The plugin includes the following tasks:
 
 1. `collectQDevS3Files`: Collects file metadata information from S3, without downloading file content
-2. `extractQDevS3Data`: Uses S3 file metadata to download CSV data and parse it into the database
+2. `extractQDevS3Data`: Uses S3 file metadata to download CSV data, parse it into the database, and resolve user display names via Identity Center
 3. `convertQDevUserMetrics`: Converts user data into aggregated metrics, calculating averages and totals
 
 ## Data Tables
@@ -74,6 +81,8 @@ The plugin includes the following tasks:
 - `_tool_q_dev_user_data`: Stores user data parsed from CSV files
 - `_tool_q_dev_user_metrics`: Stores aggregated user metrics
 
+Note: `_tool_q_dev_user_data` and `_tool_q_dev_user_metrics` tables now include `display_name` fields for human-readable user identification.
+
 ## Data Collection Configuration
 Steps to collect data:
 1. On the Config UI page, select `Advanced Mode` on the left, click `Blueprints`
 
@@ -28,15 +28,20 @@ import (
 
 // 连接项目的CRUD API
 
-// PostConnections 创建新连接
+// PostConnections 创建新连接 (enhanced with Identity Store validation)
 func PostConnections(input *plugin.ApiResourceInput) (*plugin.ApiResourceOutput, errors.Error) {
 	// 创建连接
 	connection := &models.QDevConnection{}
 	err := api.Decode(input.Body, connection, vld)
 	if err != nil {
 		return nil, err
 	}
-	// 验证
+
+	// 验证连接参数 (enhanced validation)
+	if err := validateConnection(connection); err != nil {
+		return nil, errors.BadInput.Wrap(err, "connection validation failed")
+	}
+
 	// 保存到数据库
 	err = connectionHelper.Create(connection, input)
 	if err != nil {
@@ -45,7 +50,7 @@ func PostConnections(input *plugin.ApiResourceInput) (*plugin.ApiResourceOutput,
 	return &plugin.ApiResourceOutput{Body: connection.Sanitize(), Status: http.StatusOK}, nil
 }
 
-// PatchConnection 更新现有连接
+// PatchConnection 更新现有连接 (enhanced with Identity Store validation)
 func PatchConnection(input *plugin.ApiResourceInput) (*plugin.ApiResourceOutput, errors.Error) {
 	connection := &models.QDevConnection{}
 	if err := connectionHelper.First(&connection, input.Params); err != nil {
@@ -54,6 +59,12 @@ func PatchConnection(input *plugin.ApiResourceInput) (*plugin.ApiResourceOutput,
 	if err := (&models.QDevConnection{}).MergeFromRequest(connection, input.Body); err != nil {
 		return nil, errors.Convert(err)
 	}
+
+	// 验证更新后的连接参数 (enhanced validation)
+	if err := validateConnection(connection); err != nil {
+		return nil, errors.BadInput.Wrap(err, "connection validation failed")
+	}
+
 	if err := connectionHelper.SaveWithCreateOrUpdate(connection); err != nil {
 		return nil, err
 	}
@@ -94,3 +105,38 @@ func GetConnection(input *plugin.ApiResourceInput) (*plugin.ApiResourceOutput, e
 	}
 	return &plugin.ApiResourceOutput{Body: connection.Sanitize()}, err
 }
+
+// validateConnection validates connection parameters including Identity Store fields
+func validateConnection(connection *models.QDevConnection) error {
+	// Validate AWS credentials
+	if connection.AccessKeyId == "" {
+		return errors.Default.New("AccessKeyId is required")
+	}
+	if connection.SecretAccessKey == "" {
+		return errors.Default.New("SecretAccessKey is required")
+	}
+	if connection.Region == "" {
+		return errors.Default.New("Region is required")
+	}
+	if connection.Bucket == "" {
+		return errors.Default.New("Bucket is required")
+	}
+
+	// Validate Identity Store fields (now required)
+	if connection.IdentityStoreId == "" {
+		return errors.Default.New("IdentityStoreId is required")
+	}
+	if connection.IdentityStoreRegion == "" {
+		return errors.Default.New("IdentityStoreRegion is required")
+	}
+
+	// Validate rate limit
+	if connection.RateLimitPerHour < 0 {
+		return errors.Default.New("RateLimitPerHour must be positive")
+	}
+	if connection.RateLimitPerHour == 0 {
+		connection.RateLimitPerHour = 20000 // Set default value
+	}
+
+	return nil
+}