AWS license-manager documentation change
Summary
Restructured user association and subscription processes, increased user limit from 5 to 20, separated console/CLI methods, and clarified workflow steps
Security assessment
Changes focus on workflow improvements and documentation clarity without mentioning security vulnerabilities, patches, or new security controls. The increased user limit and process separation appear to be usability enhancements rather than security-related fixes.
Diff
diff --git a/license-manager/latest/userguide/user-based-subscriptions-getting-started.md b/license-manager/latest/userguide/user-based-subscriptions-getting-started.md index eeae35f59..ad3d9f84b 100644 --- a/license-manager/latest/userguide/user-based-subscriptions-getting-started.md +++ b/license-manager/latest/userguide/user-based-subscriptions-getting-started.md @@ -240 +240 @@ Each user must have a subscription to both RDS SAL and the product they will use -You can subscribe users to a product and associate them to an instance with the following process. +When you select an instance to associate users to, you can optionally subscribe them to the products that the instance provides if they're not already subscribed. Use one of the following methods to subscribe and associate users. @@ -242,5 +242 @@ You can subscribe users to a product and associate them to an instance with the -###### To subscribe and associate users to an instance - - 1. Open the License Manager console at [https://console.aws.amazon.com/license-manager/](https://console.aws.amazon.com/license-manager/). - - 2. In the left navigation pane, under **User-based subscriptions** , choose **User association**. +Console @@ -248 +243,0 @@ You can subscribe users to a product and associate them to an instance with the - 3. Select the instance that you want to associate users with, then choose **Subscribe & Associate users**. @@ -250 +245 @@ You can subscribe users to a product and associate them to an instance with the - 4. Specify up to five user names that exist in your directory, including the **Domain name** if they exist in a trusted domain, and choose **Subscribe & Associate**. +To associate users to an instance, follow these steps: @@ -251,0 +247 @@ You can subscribe users to a product and associate them to an instance with the + 1. Open the License Manager console at [https://console.aws.amazon.com/license-manager/](https://console.aws.amazon.com/license-manager/). @@ -252,0 +249 @@ You can subscribe users to a product and associate them to an instance with the + 2. In the left navigation pane, under **User-based subscriptions** , choose **User association**. @@ -253,0 +251 @@ You can subscribe users to a product and associate them to an instance with the + 3. Select the instance that you want to associate users with, then choose one of the following options: @@ -255 +253 @@ You can subscribe users to a product and associate them to an instance with the -On the **User association** page, the users you selected should be displayed under **Users** with an **Association Status** of **Associated**. Also, on the **Products** page, you can review the product's details page by choosing the **Product name**. Subscribed users will be displayed under **Users** with a **Status** of **Subscribed**. +**Associate users** @@ -257 +254,0 @@ On the **User association** page, the users you selected should be displayed und -You can subscribe users to a product using one of the following methods. @@ -259 +256 @@ You can subscribe users to a product using one of the following methods. -Console +Specify up to 20 user names that exist in your directory, including the **Domain name** if they exist in a trusted domain, and choose **Associate**. _If you use this method, users must already be subscribed to the products that the instance provides._ @@ -260,0 +258 @@ Console +**Subscribe & Associate users** @@ -262 +259,0 @@ Console -###### Subscribe users to a product (Console) @@ -264 +261 @@ Console - 1. Open the License Manager console at [https://console.aws.amazon.com/license-manager/](https://console.aws.amazon.com/license-manager/). +Specify up to 20 user names that exist in your directory, including the **Domain name** if they exist in a trusted domain, and choose **Subscribe & Associate**. @@ -266 +262,0 @@ Console - 2. In the left navigation pane, under **User-based subscriptions** , choose **Products**. @@ -268 +263,0 @@ Console - 3. Select a product to subscribe users to in which the **Marketplace subscription status** is **Active** , and choose **Subscribe user**. @@ -270 +264,0 @@ Console - 4. Specify up to five user names that exist in your directory, including the **Domain name** if they exist in a trusted domain, and choose **Subscribe**. @@ -272 +266 @@ Console -Users that have a subscription will be displayed under **Users** with a **Status** of **Subscribed**. +###### (Optional) Review user associations @@ -273,0 +268 @@ Users that have a subscription will be displayed under **Users** with a **Status +On the **User association** page, the users you selected are displayed under **Users** with an **Association Status** of **Associated**. @@ -274,0 +270 @@ Users that have a subscription will be displayed under **Users** with a **Status +###### (Optional) Review subscribed users @@ -275,0 +272 @@ Users that have a subscription will be displayed under **Users** with a **Status +On the **Products** page, choose the **Product name**. Subscribed users are displayed under **Users** with a **Status** of **Subscribed**. @@ -280,3 +277 @@ AWS CLI -###### Subscribe users to a product (AWS CLI) - -You can subscribe users to a product that is registered with your identity provider using the [StartProductSubscription](https://docs.aws.amazon.com/license-manager-user-subscriptions/latest/APIReference/API_StartProductSubscription.html) operation. +You can associate users with an instance launched to provide the user-based subscription with the [AssociateUser](https://docs.aws.amazon.com/license-manager-user-subscriptions/latest/APIReference/API_AssociateUser.html) operation. @@ -285 +280 @@ You can subscribe users to a product that is registered with your identity provi - aws license-manager-user-subscriptions start-product-subscription --username <user_name> --product <product_name> --identity-provider ""ActiveDirectoryIdentityProvider" = {"DirectoryId" = "<directory_id>"}" + aws license-manager-user-subscriptions associate-user --username <user_name> --instance-id <instance_id> --identity-provider ""ActiveDirectoryIdentityProvider" = {"DirectoryId" = "<directory_id>"}" @@ -287 +282 @@ You can subscribe users to a product that is registered with your identity provi -###### Subscribe users to a product with a self-managed Active Directory (AWS CLI) +###### To associate self-managed Active Directory users to an instance (AWS CLI) @@ -289 +284 @@ You can subscribe users to a product that is registered with your identity provi -You can subscribe users from your self-managed Active Directory to a product that is registered with your AWS Managed Microsoft AD directory using the [StartProductSubscription](https://docs.aws.amazon.com/license-manager-user-subscriptions/latest/APIReference/API_StartProductSubscription.html) operation. +You can associate users from your self-managed Active Directory with an instance launched to provide the user-based subscription with the [AssociateUser](https://docs.aws.amazon.com/license-manager-user-subscriptions/latest/APIReference/API_AssociateUser.html) operation. @@ -292 +287 @@ You can subscribe users from your self-managed Active Directory to a product tha - aws license-manager-user-subscriptions start-product-subscription --username <user_name> --product <product_name> --identity-provider 'ActiveDirectoryIdentityProvider" = {"DirectoryId" = "<directory_id>"}' --domain <self-managed-domain-name> + aws license-manager-user-subscriptions associate-user --username <user_name> --instance-id <instance_id> --identity-provider ""ActiveDirectoryIdentityProvider" = {"DirectoryId" = "<directory_id>"}" --domain <self-managed-domain-name> @@ -296,7 +291 @@ For more information about the available software products, see [Supported softw -Users that have a subscription will be displayed under **Users** with a **Status** of **Subscribed**. - -You can associate users to an instance using one of the following methods. - -###### Important - -Before associating a product to an instance you must first subscribe users to the products. +You can subscribe users to a product using one of the following methods. @@ -307 +296 @@ Console -###### To associate users to an instance (Console) +###### Subscribe users to a product (Console) @@ -311 +300,5 @@ Console - 2. In the left navigation pane, under **User-based subscriptions** , choose **User association**. + 2. In the left navigation pane, under **User-based subscriptions** , choose **Products**. + + 3. Select a product to subscribe users to in which the **Marketplace subscription status** is **Active**. + + 4. If the product is Microsoft RDS, select the registered Active Directory that contains the users to subscribe. @@ -313 +306 @@ Console - 3. Select the instance that you want to associate users with, then choose **Associate users**. + 5. Choose **Subscribe user** to continue. @@ -315 +308 @@ Console - 4. Specify up to five user names that exist in your directory, including the **Domain name** if they exist in a trusted domain, and choose **Associate**. + 6. Specify up to 20 user names that exist in your directory, including the **Domain name** if they exist in a trusted domain, and choose **Subscribe**. @@ -317 +310 @@ Console -On the **User association** page, the users you selected should be displayed under **Users** with an **Association Status** of **Associated**. +Users that have a subscription are displayed under **Users** with a **Status** of **Subscribed**. @@ -325 +318 @@ AWS CLI -###### To associate users to an instance (AWS CLI) +###### Subscribe users to a product (AWS CLI) @@ -327 +320 @@ AWS CLI -You can associate users with an instance launched to provide the user-based subscription with the [AssociateUser](https://docs.aws.amazon.com/license-manager-user-subscriptions/latest/APIReference/API_AssociateUser.html) operation. +You can subscribe users to a product that is registered with your identity provider using the [StartProductSubscription](https://docs.aws.amazon.com/license-manager-user-subscriptions/latest/APIReference/API_StartProductSubscription.html) operation. @@ -330 +323 @@ You can associate users with an instance launched to provide the user-based subs - aws license-manager-user-subscriptions associate-user --username <user_name> --instance-id <instance_id> --identity-provider ""ActiveDirectoryIdentityProvider" = {"DirectoryId" = "<directory_id>"}" + aws license-manager-user-subscriptions start-product-subscription --username <user_name> --product <product_name> --identity-provider ""ActiveDirectoryIdentityProvider" = {"DirectoryId" = "<directory_id>"}" @@ -332 +325 @@ You can associate users with an instance launched to provide the user-based subs -###### To associate self-managed Active Directory users to an instance (AWS CLI) +###### Subscribe users to a product with a self-managed Active Directory (AWS CLI) @@ -334 +327 @@ You can associate users with an instance launched to provide the user-based subs -You can associate users from your self-managed Active Directory with an instance launched to provide the user-based subscription with the [AssociateUser](https://docs.aws.amazon.com/license-manager-user-subscriptions/latest/APIReference/API_AssociateUser.html) operation. +You can subscribe users from your self-managed Active Directory to a product that is registered with your AWS Managed Microsoft AD directory using the [StartProductSubscription](https://docs.aws.amazon.com/license-manager-user-subscriptions/latest/APIReference/API_StartProductSubscription.html) operation. @@ -337 +330 @@ You can associate users from your self-managed Active Directory with an instance - aws license-manager-user-subscriptions associate-user --username <user_name> --instance-id <instance_id> --identity-provider ""ActiveDirectoryIdentityProvider" = {"DirectoryId" = "<directory_id>"}" --domain <self-managed-domain-name> + aws license-manager-user-subscriptions start-product-subscription --username <user_name> --product <product_name> --identity-provider 'ActiveDirectoryIdentityProvider" = {"DirectoryId" = "<directory_id>"}' --domain <self-managed-domain-name> @@ -341 +334 @@ For more information about the available software products, see [Supported softw -On the **User association** page, the users you selected should be displayed under **Users** with an **Association Status** of **Associated**. +Users that have a subscription will be displayed under **Users** with a **Status** of **Subscribed**.