AWS AWSCloudFormation documentation change
Summary
Expanded IAM Identity Center documentation with security context about authentication and SSO
Security assessment
Adds explicit security context about user authentication and access control features but does not fix a vulnerability
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.md b/AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.md index cdc2cab20..6f91b58c8 100644 --- a//AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.md +++ b//AWSCloudFormation/latest/UserGuide/aws-properties-opensearchservice-domain-identitycenteroptions.md @@ -7 +7 @@ SyntaxProperties -Container for IAM Identity Center Options settings. +Settings container for integrating IAM Identity Center with OpenSearch UI applications, which enables enabling secure user authentication and access control across multiple data sources. This setup supports single sign-on (SSO) through IAM Identity Center, allowing centralized user management. @@ -42 +42 @@ To declare this entity in your AWS CloudFormation template, use the following sy -True to enable IAM Identity Center for API access in Amazon OpenSearch Service. +Indicates whether IAM Identity Center is enabled for the application. @@ -53 +53 @@ _Required_ : No -The ARN for IAM Identity Center Application which will integrate with Amazon OpenSearch Service. +The ARN of the IAM Identity Center application that integrates with Amazon OpenSearch Service. @@ -70 +70 @@ _Minimum_ : `20` -The ARN for IAM Identity Center Instance. +The Amazon Resource Name (ARN) of the IAM Identity Center instance. @@ -87 +87 @@ _Minimum_ : `20` -The ID of IAM Identity Store. +The identifier of the IAM Identity Store. @@ -104 +104 @@ _Minimum_ : `1` -Specify the attribute that contains the backend role (groupName, groupID) of IAM Identity Center +Specifies the attribute that contains the backend role identifier (such as group name or group ID) in IAM Identity Center. @@ -117 +117 @@ _Required_ : No -Specify the attribute that contains the subject (username, userID, email) of IAM Identity Center. +Specifies the attribute that contains the subject identifier (such as username, user ID, or email) in IAM Identity Center.