AWS signin medium security documentation change
Summary
Added troubleshooting section for 'It's not you, it's us' error with guidance to check device time synchronization
Security assessment
Addresses a security-related authentication failure scenario caused by time synchronization issues affecting MFA functionality. Provides concrete mitigation steps to resolve TOTP-related sign-in problems.
Diff
diff --git a/signin/latest/userguide/troubleshooting-builder-id-issues.md b/signin/latest/userguide/troubleshooting-builder-id-issues.md index b2be61200..434510da2 100644 --- a//signin/latest/userguide/troubleshooting-builder-id-issues.md +++ b//signin/latest/userguide/troubleshooting-builder-id-issues.md @@ -5 +5 @@ -My email is already in useI can't complete email verificationI receive an error that states 'It’s not you, it’s us' when I try to sign inI forgot my passwordI can't set a new passwordMy password isn’t workingMy password isn't working and I can no longer access emails sent to my AWS Builder ID email addressI can't enable MFAI can't add an authenticator app as a MFA deviceI can't remove an MFA deviceI get the message 'An unexpected error has occurred' when I try to register or sign in with an authenticator appSign out doesn't sign me out completelyI'm still looking to solve my problem +My email is already in useI can't complete email verificationI receive an error that states 'It’s not you, it’s us' when I try to sign inI forgot my passwordI can't set a new passwordMy password isn’t workingMy password isn't working and I can no longer access emails sent to my AWS Builder ID email addressI can't enable MFAI can't add an authenticator app as a MFA deviceI can't remove an MFA deviceI get the message 'An unexpected error has occurred' when I try to register or sign in with an authenticator appI get the message 'It's not you, it's us' when trying to sign in to AWS Builder IDSign out doesn't sign me out completelyI'm still looking to solve my problem @@ -34,0 +35,2 @@ Use the information here to help you troubleshoot issues you might have with you + * I get the message 'It's not you, it's us' when trying to sign in to AWS Builder ID + @@ -161,3 +163 @@ A time-based one-time password (TOTP) system, such as the one used by AWS Builde -###### Important - -We recommend that you register multiple MFA devices. If you lose access to all registered MFA devices, you will be unable to recover your AWS Builder ID. +## I get the message 'It's not you, it's us' when trying to sign in to AWS Builder ID @@ -165 +165 @@ We recommend that you register multiple MFA devices. If you lose access to all r -If you continue to be unable to authenticate with your primary MFA device, you can use another MFA device to sign-in. Once you have signed in, you can remove and replace an MFA device to correctly associate it with your AWS Builder ID. +Verify the date and time settings on the device you're using to sign in. We recommend that you set the date and time to be set automatically. If that's not available, we recommend syncing your date and time to a known Network Time Protocol (NTP) server.