AWS solutions high security documentation change
Summary
Replaced 'solution' with 'Guidance' terminology and clarified admin rights due to lack of application role support
Security assessment
The change explicitly states that all users receive admin rights because application roles are unsupported. This indicates a privilege escalation risk with no role-based access control, directly impacting security posture.
Diff
diff --git a/solutions/latest/data-transfer-hub/step-1.-option-2-launch-the-stack-in-aws-china-regions.md b/solutions/latest/data-transfer-hub/step-1.-option-2-launch-the-stack-in-aws-china-regions.md index cbafc0ee4..6885d4eb8 100644 --- a//solutions/latest/data-transfer-hub/step-1.-option-2-launch-the-stack-in-aws-china-regions.md +++ b//solutions/latest/data-transfer-hub/step-1.-option-2-launch-the-stack-in-aws-china-regions.md @@ -76 +76 @@ In AWS Regions where Amazon Cognito is not yet available, you can use OIDC to pr -Because the solution does not support application roles, all the users will receive admin rights. +Because the Guidance does not support application roles, all the users will receive admin rights. @@ -116 +116 @@ This automated AWS CloudFormation template deploys Data Transfer in the AWS Clou -You are responsible for the cost of the AWS services used while running this solution. For more details, visit the [Cost](./cost.html) section in this guide, and refer to the pricing webpage for each AWS service used in this solution. +You are responsible for the cost of the AWS services used while running this Guidance. For more details, visit the [Cost](./cost.html) section in this guide, and refer to the pricing webpage for each AWS service used in this Guidance. @@ -122 +122 @@ You are responsible for the cost of the AWS services used while running this sol - 2. The template launches in your console’s default Region. To launch the solution in a different AWS Region, use the Region selector in the console navigation bar. + 2. The template launches in your console’s default Region. To launch the Guidance in a different AWS Region, use the Region selector in the console navigation bar. @@ -126 +126 @@ You are responsible for the cost of the AWS services used while running this sol - 4. On the **Specify stack details** page, assign a name to your solution stack. For information about naming character limitations, refer to [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-limits.html) in the _AWS Identity and Access Management User Guide_. + 4. On the **Specify stack details** page, assign a name to your Guidance stack. For information about naming character limitations, refer to [IAM and AWS STS quotas](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-limits.html) in the _AWS Identity and Access Management User Guide_. @@ -128 +128 @@ You are responsible for the cost of the AWS services used while running this sol - 5. Under **Parameters** , review the parameters for this solution template and modify them as necessary. This solution uses the following default values. + 5. Under **Parameters** , review the parameters for this Guidance template and modify them as necessary. This Guidance uses the following default values.