AWS Security ChangesHomeSearch

AWS singlesignon documentation change

Service: singlesignon · 2025-04-18 · Documentation low

File: singlesignon/latest/userguide/how-it-works-configurable-ADsync.md

Summary

Removed nested group assignment details and added prerequisites link

Security assessment

Documentation simplification without security impact

Diff

diff --git a/singlesignon/latest/userguide/how-it-works-configurable-ADsync.md b/singlesignon/latest/userguide/how-it-works-configurable-ADsync.md
index 3fa1e3341..083ecd090 100644
--- a//singlesignon/latest/userguide/how-it-works-configurable-ADsync.md
+++ b//singlesignon/latest/userguide/how-it-works-configurable-ADsync.md
@@ -9 +9 @@ CreationUpdateDeletion
-IAM Identity Center refreshes the AD-based identity data in the identity store by using the following process. 
+IAM Identity Center refreshes the AD-based identity data in the identity store by using the following process. To learn more about the prerequisites, see [Prerequisites and considerations](./provision-users-from-ad-configurable-ADsync.html#prerequisites-configurable-ADsync).
@@ -15 +15 @@ After you connect your self-managed directory in Active Directory or your AWS Ma
-Groups that are members of other groups (called _nested groups_ or _child groups_) are also written to the identity store. When you make assignments to a group in Active Directory that contains nested groups, the way in which the assignments are applied depends on whether you use AD sync or configurable AD sync. For more information, see [Making assignments to nested groups in Active Directory](./provision-users-from-ad-configurable-ADsync.html#makingassignmentsnestedgroups).
+Groups that are members of other groups (called _nested groups_ or _child groups_) are also written to the identity store.