AWS network-manager documentation change
Summary
Updated documentation to consistently reference 'AWS Organizations' service name, fix typos, and ensure proper linking to AWS Organizations User Guide. Added explicit references to AWS Organizations in sections about multi-account management, trusted access, and delegated administrators.
Security assessment
Changes focus on documentation clarity and accuracy rather than addressing security vulnerabilities. While mentions of service-linked roles and IAM roles exist, these are standard security practices and the changes don't introduce new security content or address specific vulnerabilities.
Diff
diff --git a/network-manager/latest/tgwnm/nm-multi-account.md b/network-manager/latest/tgwnm/nm-multi-account.md index b4d71f1b0..4b4edf6bd 100644 --- a//network-manager/latest/tgwnm/nm-multi-account.md +++ b//network-manager/latest/tgwnm/nm-multi-account.md @@ -9 +9 @@ PrerequisitesManage multiple accounts -With AWS Global Networks for Transit Gateways, you can manage, monitor, and view dashboards of global network resources from multiple AWS accounts associated with a single organization using AWS Network Manager. For more information about setting up multi-account, see Manage multiple accounts in global networks using below. +With AWS Global Networks for Transit Gateways, you can manage, monitor, and view dashboards of global network resources from multiple AWS accounts associated with a single organization using AWS Network Manager. For more information about setting up multi-account, see Manage multiple accounts in global networks using AWS Organizations below. @@ -22 +22 @@ With AWS Global Networks for Transit Gateways, you can manage, monitor, and view -To enable multi-account, you first set up an account in AWS Organizations. This first account becomes the management account. Using this account, you can then add other accounts as member accounts to your organization. For more information about how multi-account support works, see [Creating and managing an organization](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org.html) in the _User Guide_. +To enable multi-account, you first set up an account in AWS Organizations. This first account becomes the management account. Using this account, you can then add other accounts as member accounts to your organization. For more information about how multi-account support works, see [Creating and managing an organization](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org.html) in the _AWS Organizations User Guide_. @@ -24 +24 @@ To enable multi-account, you first set up an account in AWS Organizations. This -## Manage multiple accounts in global networks using +## Manage multiple accounts in global networks using AWS Organizations @@ -26 +26 @@ To enable multi-account, you first set up an account in AWS Organizations. This -AWS Global Networks for Transit Gateways allows you to centrally manage, monitor, and visualize network resources from multiple accounts within an organization in a single global network. To manage resources from multiple accounts in global networks, you first set up an organization using . The first account that you use to create an organization becomes the management account. Using this account, you can add other accounts as member accounts to your organization. From the management account, you can designate one or more accounts within the organization as delegated administrator accounts by registering them using the global networks console. For more information about setting up an organization, see [Creating and managing an organization](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org.html) in the _User Guide_. +AWS Global Networks for Transit Gateways allows you to centrally manage, monitor, and visualize network resources from multiple accounts within an organization in a single global network. To manage resources from multiple accounts in global networks, you first set up an organization using AWS Organizations. The first account that you use to create an organization becomes the management account. Using this account, you can add other accounts as member accounts to your organization. From the management account, you can designate one or more accounts within the orgaization as delegated administrator accounts by registering them using the global networks console. For more information about setting up an organization, see [Creating and managing an organization](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_org.html) in the _AWS Organizations User Guide_. @@ -43 +43 @@ With multi-account support, you can create a single global network for any of yo -Trusted access creates `AWSServiceAccess` for global networks and AWS CloudFormation StackSets with . Enabling trusted access provides required permissions for to deploy service-linked roles (SLRs) to all member accounts within your organization. +Trusted access creates `AWSServiceAccess` for global networks and AWS CloudFormation StackSets with AWS Organizations. Enabling trusted access provides required permissions for AWS Organizations to deploy service-linked roles (SLRs) to all member accounts within your organization. @@ -83 +83 @@ For more information about enabling trusted access, see [Enable trusted access i -Disabling trusted access through the global networks console removes `AWSServiceAccess` for global networks with . Disabling trusted access removes global networks access to perform tasks within your organization. won't allow you to disable an organization's trusted access for the Network Manager service if there are any delegated administrators that haven't been deregistered from that organization. +Disabling trusted access through the global networks console removes `AWSServiceAccess` for global networks with AWS Organizations. Disabling trusted access removes global networks access to perform tasks within your organization. AWS Organizations won't allow you to disable an organization's trusted access for the Network Manager service if there are any delegated administrators that haven't been deregistered from that organization. @@ -85 +85 @@ Disabling trusted access through the global networks console removes `AWSService - * Disabling trusted access through the global networks console won't remove `AWSServiceAccess` for AWS CloudFormation StackSets with . You can manually remove the service access for AWS CloudFormation StackSets by using the AWS CloudFormation StackSet console or by using the Organizations API/CLI. For more information on disabling trusted access for AWS CloudFormation StackSets, see [Disable trusted access with AWS CloudFormation StackSets](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudformation.html#integrate-disable-ta-cloudformation) in the _User Guide_. + * Disabling trusted access through the global networks console won't remove `AWSServiceAccess` for AWS CloudFormation StackSets with AWS Organizations. You can manually remove the service access for AWS CloudFormation StackSets by using the AWS CloudFormation StackSet console or by using the Organizations API/CLI. For more information on disabling trusted access for AWS CloudFormation StackSets, see [Disable trusted access with AWS CloudFormation StackSets](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudformation.html#integrate-disable-ta-cloudformation) in the _AWS Organizations User Guide_. @@ -105 +105 @@ For more information about disabling trusted access, see [Disable trusted access -Member accounts in your organization with delegated administrator access are able to leverage service-linked roles and assume IAM roles for access across multiple accounts. Only member accounts that are part of your can be registered as delegated administrators. Your organization can have up to ten registered delegated administrators. Before you register a delegated administrator, you must enable global networks trusted access for your organization. For more information, see [Enable trusted access in an AWS global network](./nm-enable-trusted.html). +Member accounts in your organization with delegated administrator access are able to leverage service-linked roles and assume IAM roles for access across multiple accounts. Only member accounts that are part of your AWS Organizations can be registered as delegated administrators. Your organization can have up to ten registered delegated administrators. Before you register a delegated administrator, you must enable global networks trusted access for your organization. For more information, see [Enable trusted access in an AWS global network](./nm-enable-trusted.html). @@ -109 +109 @@ Member accounts in your organization with delegated administrator access are abl -Using your management account to manage your global network in global networks is not recommended because the required service-linked roles are not propagated to this account. For more information on service-linked roles, see [AWS Global Networks for Transit Gateways service-linked roles](./nm-service-linked-roles.html). +Using your AWS Organizations management account to manage your global network in global networks is not recommended because the required service-linked roles are not propagated to this account. For more information on service-linked roles, see [AWS Global Networks for Transit Gateways service-linked roles](./nm-service-linked-roles.html). @@ -119 +119 @@ For information about registering a delegated administrator, see [Register an ad -Deregistering a delegated administrator removes that account's permission to leverage SLRs and assume IAM roles in other member accounts that were set up using . +Deregistering a delegated administrator removes that account's permission to leverage SLRs and assume IAM roles in other member accounts that were set up using AWS Organizations.