Merge branch 'dev-doc-amazon-q' into 'master'

Add doc on amazon q setup

See merge request https://gitlab.com/gitlab-org/gitlab/-/merge_requests/183620



Merged-by: Igor Drozdov <idrozdov@gitlab.com>
Approved-by: Igor Drozdov <idrozdov@gitlab.com>
Reviewed-by: Jessie Young <jessieyoung@gitlab.com>
Co-authored-by: Hongtao Yang <hyang@gitlab.com>

doc/development/ai_features/amazon_q_integration.md

+---
+stage: AI-powered
+group: Custom Models
+info: Any user with at least the Maintainer role can merge updates to this content. For details, see https://docs.gitlab.com/ee/development/development_processes.html#development-guidelines-review.
+title: Amazon Q integration for testing and evaluation
+---
+
+> This guide combines and build on top of the following guides and sources. It describes Amazon Q setup for testing and evaluation purposes:
+>
+> - [Set up GitLab Duo with Amazon Q](../../user/duo_amazon_q/setup.md)
+> - [code-suggestions development guide](../code_suggestions/_index.md)
+
+This guide describes how to set up Amazon Q in a GitLab Linux package running in a VM, using the staging AI Gateway. The reason we need a GitLab Linux package instance instead of GDK is that the GitLab instance needs an HTTPS URL that can be accessed by Amazon Q.
+
+## Install and configure a GitLab Linux package on a virtual machine
+
+1. Create a VM in either GCP or AWS
+
+   - Follow this [guide](../../install/google_cloud_platform/_index.md) on how to create a VM in GCP
+   - Create a VM in AWS
+      1. Go to [cloud sandbox](https://gitlabsandbox.cloud/cloud), and login with OKTA
+      1. Click "Create Individual Account", and choose `aws-***` (not `aws-services-***` or `aws-dedicated-***`). This will create a AWS sandbox and display login credentials
+      1. Configure an EC2 machine of similar spec as GCP VM
+
+   A few things to note:
+   - Need to enable both http and https traffic under firewall setting.
+   - Copy the external IP of the VM instance created.
+
+1. Install GitLab
+   1. Follow this [guide](https://about.gitlab.com/install/#ubuntu) on how to install GitLab Linux package.
+      We need to set up the external URL and an initial password. Install GitLab using the following command:
+
+      ```shell
+      sudo GITLAB_ROOT_PASSWORD="your_password" EXTERNAL_URL="https://<vm-instance-external-ip>.nip.io" apt install gitlab-ee
+      ```
+
+      This will use nip.io as the DNS service so the GitLab instance can be accessed through HTTPs
+
+1. Config the newly installed GitLab instance
+   1. SSH into the VM, and add the following config into `/etc/gitlab/gitlab.rb`
+
+      ```ruby
+      gitlab_rails['env'] = {
+        "GITLAB_LICENSE_MODE" => "test",
+        "CUSTOMER_PORTAL_URL" => "https://customers.staging.gitlab.com",
+        "AI_GATEWAY_URL" => "https://cloud.staging.gitlab.com/ai"
+      }
+      ```
+
+   1. Apply the config changes by `sudo gitlab-ctl reconfigure`
+1. Obtain and activate a self-managed ultimate license
+   1. Go to [staging customers portal](https://customers.staging.gitlab.com/), select "Signin with GitLab.com account".
+   1. Instead of clicking "Buy new subscription", go to the [product page](https://customers.staging.gitlab.com/subscriptions/new?plan_id=2c92a00c76f0c6c20176f2f9328b33c9) directly. For reason of this, see [buy_subscription](https://gitlab.com/gitlab-org/customers-gitlab-com/-/blob/8aa922840091ad5c5d96ada43d0065a1b6198841/doc/flows/buy_subscription.md)
+   1. Purchase the subscription using [a test credit card](https://gitlab.com/gitlab-org/customers-gitlab-com/#testing-credit-card-information). An activation code will be given. Do not purchase a duo-pro add-on, because currently duo-pro and Q are mutually exclusive.
+   1. Go to the GitLab instance created earlier (`https://<vm-instance-external-ip>.nip.io`), log in with root account. Then on the left sidebar, go to **Admin > Subscription**, and enter the activation code
+
+## Create and configure an AWS sandbox
+
+1. Follow the [same step](#install-and-configure-a-gitlab-linux-package-on-a-virtual-machine) described above on how to create an AWS sandbox if you haven't had one already.
+1. Login into the newly created AWS account and create an **Identity Provider** following this [instruction](../../user/duo_amazon_q/setup.md#create-an-iam-identity-provider) with slight modifications:
+
+   - Provider URL: `https://glgo.staging.runway.gitlab.net/cc/oidc/<your_gitlab_instance_id>`
+   - Audience: `gitlab-cc-<your_gitlab_instance_id>`
+
+   The GitLab instance ID can be found at `<gitlab_url>/admin/ai/amazon_q_settings`
+1. Create a new role using the identity provider. For this, we can follow [this section](../../user/duo_amazon_q/setup.md#create-an-iam-role) exactly.
+
+## Add Amazon Q to GitLab
+
+1. Follow [Enter the ARN in GitLab and enable Amazon Q](../../user/duo_amazon_q/setup.md#enter-the-arn-in-gitlab-and-enable-amazon-q) exactly
+1. [Invite Amazon Q user to your project](../../user/duo_amazon_q/setup.md#add-the-amazon-q-user-to-your-project). For this step, we do not need to configure AI Gateway again, because we've already done it when configuring our GitLab instance.
+1. Now Q should be working. We can test it like [this](https://gitlab.com/gitlab-com/ops-sub-department/aws-gitlab-ai-integration/integration-motion-planning/-/wikis/integration-docs#testing-q)