AWS quicksight documentation change
Summary
Added requirement that QuickSight sign-up with IAM Identity Center must use the same region as the IAM Identity Center instance
Security assessment
The change clarifies regional configuration requirements but does not address a specific security vulnerability or weakness. It prevents misconfiguration rather than fixing a security issue.
Diff
diff --git a/quicksight/latest/user/sec-identity-management-identity-center.md b/quicksight/latest/user/sec-identity-management-identity-center.md index 4561ea4fc..71a911d89 100644 --- a//quicksight/latest/user/sec-identity-management-identity-center.md +++ b//quicksight/latest/user/sec-identity-management-identity-center.md @@ -17 +17 @@ IAM Identity Center helps you securely create or configure your existing workfor -Configure QuickSight and IAM Identity Center so that you can sign up for a new QuickSight account with an IAM Identity Center configured identity source. With IAM Identity Center, you can configure your external identity provider as an identity source. You can also use IAM Identity Center as an identity store if you don't want to use a third-party identity provider with QuickSight. Identity methods can't be changed after your account is created. +Configure QuickSight and IAM Identity Center so that you can sign up for a new QuickSight account with an IAM Identity Center configured identity source. You can only sign up for QuickSight with IAM Identity Center using the same region as your IAM Identity Center instance. With IAM Identity Center, you can configure your external identity provider as an identity source. You can also use IAM Identity Center as an identity store if you don't want to use a third-party identity provider with QuickSight. Identity methods can't be changed after your account is created.