AWS notifications medium security documentation change
Summary
Updated documentation for enabling trusted access in AWS Organizations integration, clarified requirements for AWS managed notifications, restructured topics, and added detailed steps for enabling trusted access.
Security assessment
Changes emphasize proper configuration of trusted access controls between services, specifically calling out security implications of enabling AWS managed notifications and delegated administrator permissions. The addition of service-specific trusted access requirements directly relates to security configuration.
Diff
diff --git a/notifications/latest/userguide/uno-orgs.md b/notifications/latest/userguide/uno-orgs.md index c30967403..3a3e730e0 100644 --- a/notifications/latest/userguide/uno-orgs.md +++ b/notifications/latest/userguide/uno-orgs.md @@ -5 +5 @@ -Registering delegated adminsRemoving delegated admins +Enabling trusted accessRegistering delegated adminsRemoving delegated admins @@ -13 +13 @@ If you previously enabled trusted access for User Notifications using the AWS Or -To enable AWS Organizations in User Notifications, you must enable trusted access. Enabling trusted access between AWS Organizations and User Notifications allows User Notifications to make API calls to AWS Organizations. User Notifications does this to: +To enable AWS Organizations in User Notifications, you must enable trusted access. Enabling trusted access between AWS Organizations and User Notifications allows User Notifications to make API calls to AWS Organizations. User Notifications uses AWS Organizations in accounts that [enable AWS managed notifications](./managing-notification-features.html) to: @@ -15 +15 @@ To enable AWS Organizations in User Notifications, you must enable trusted acces - * [Aggregate notifications across accounts](./managed-notification-aggregation.html#notification-aggregation) in management and delegated administrator accounts + * [Aggregate AWS managed notifications across accounts](./managed-notification-aggregation.html#notification-aggregation) in management and delegated administrator accounts @@ -17 +17 @@ To enable AWS Organizations in User Notifications, you must enable trusted acces - * [Deduplicate notifications accross accounts](./managed-notification-aggregation.html#managed-notification-dedupe) + * [Deduplicate AWS managed notifications accross accounts](./managed-notification-aggregation.html#managed-notification-dedupe) @@ -24 +24 @@ For example, if management and member accounts within the same organization shar -###### Important +###### Note @@ -26 +26 @@ For example, if management and member accounts within the same organization shar -You must be logged in with the management account to enable trusted access. +Trusted access is granted to individual services. You must enable trusted access for User Notifications, even if you've previously enabled trusted access for other services like AWS Health. @@ -28 +28 @@ You must be logged in with the management account to enable trusted access. -###### To enable trusted access +###### Topics @@ -30 +30 @@ You must be logged in with the management account to enable trusted access. - 1. Open User Notifications in the [AWS Management Console](https://console.aws.amazon.com/). + * Enabling trusted access @@ -32 +32 @@ You must be logged in with the management account to enable trusted access. - 2. In the navigation pane, choose **Organizations settings**. + * Registering delegated administrators in AWS User Notifications @@ -34 +34 @@ You must be logged in with the management account to enable trusted access. - 3. Choose **Enable trusted access**. + * Removing delegated administrators in AWS User Notifications @@ -39 +39 @@ You must be logged in with the management account to enable trusted access. -###### Topics +## Enabling trusted access @@ -41 +41 @@ You must be logged in with the management account to enable trusted access. - * Registering delegated administrators in AWS User Notifications +###### Important @@ -43 +43,11 @@ You must be logged in with the management account to enable trusted access. - * Removing delegated administrators in AWS User Notifications +You must be logged in with the management account to enable trusted access. + +You can enable AWS Organizations in User Notifications by enabling trusted access. Enabling trusted access allows User Notifications to [aggregate and deduplicate AWS managed notifications](./managed-notification-aggregation.html) in accounts that [enable AWS managed notifications](./managing-notification-features.html). + +###### To enable trusted access + + 1. Open User Notifications in the [AWS Management Console](https://console.aws.amazon.com/). + + 2. In the navigation pane, choose **Organizations settings**. + + 3. Choose **Enable trusted access**. @@ -50 +60 @@ You must be logged in with the management account to enable trusted access. -Delegated administrators share administrator access for User Notifications. They're able to view notifications about member accounts in the organization. You must [enable trusted access](./uno-orgs.html) before registering delegated administrators. You can register up to five delegated administrators. +Delegated administrators share administrator access for User Notifications. They're able to view notifications about member accounts in the organization. You must enable trusted access before registering delegated administrators. You can register up to five delegated administrators. You must also [enable AWS managed notifications](./managing-notification-features.html) to allow delegated administrators to view AWS managed notifications.