AWS solutions documentation change
Summary
Added documentation for Multi Account/Multi Region Deployment feature including SSM parameters and IAM role deployment via StackSet
Security assessment
The change documents IAM role deployment for cross-account access, which is a security-related configuration, but does not indicate remediation of a specific vulnerability
Diff
diff --git a/solutions/latest/connected-mobility-solution-on-aws/automotive-cloud-developer-portal.md b/solutions/latest/connected-mobility-solution-on-aws/automotive-cloud-developer-portal.md index 580ec02f7..c54f8a140 100644 --- a/solutions/latest/connected-mobility-solution-on-aws/automotive-cloud-developer-portal.md +++ b/solutions/latest/connected-mobility-solution-on-aws/automotive-cloud-developer-portal.md @@ -5 +5 @@ -Supported networking scenarios for ACDP +Supported networking scenarios for ACDPMulti Account/Multi Region Deployment @@ -44,0 +45,8 @@ ACDP can be configured with the following networking topologies: +## Multi Account/Multi Region Deployment + +ACDP can be configured to enable cross-account deployment, thus enabling a Multi Account/Multi Region Deployment feature. In order to enable this feature, you need to provide values for certain CloudFormation Parameters when you deploy ACDP CloudFormation template. Detailed instructions are given in [Deployment Instructions](./deploy-the-solution.html) section. + +Upon succesfull deployment of ACDP, you need to deploy the [Guidance stack](https://github.com/aws-solutions/connected-mobility-solution-on-aws/blob/main/source/modules/acdp/guidance/README.md). This stack deploys SSM Parameters necessary to discover enrolled accounts and regions, as well as a StackSet configured to deploy AWS IAM roles necessary for ACDP to do cross-account deployments. This StackSet is automatically triggered when a new account is added to the enrolled Organizational Unit. + + +