AWS awssupport documentation change
Summary
Discouraged root user access, updated IAM policy guidance, and fixed grammatical errors
Security assessment
Promotes IAM user access over root user (security best practice) but does not address an active security vulnerability.
Diff
diff --git a/awssupport/latest/user/accessing-support.md b/awssupport/latest/user/accessing-support.md index 21b5e8171..8aef67dbd 100644 --- a//awssupport/latest/user/accessing-support.md +++ b//awssupport/latest/user/accessing-support.md @@ -5 +5 @@ -AWS accountAWS support actionsIAMAccess to AWS Trusted Advisor +AWS account (not recommended)AWS support actionsIAMAccess to AWS Trusted Advisor @@ -13,2 +12,0 @@ You can use one of the following options to access Support Center: - * Use the email address and password associated with your AWS account. This identity is called the AWS account _root user_. - @@ -16,0 +15,2 @@ You can use one of the following options to access Support Center: + * Use the email address and password associated with your AWS account. This identity is called the AWS account _root user_ (not recommended). + @@ -26 +26 @@ If you can't sign in to Support Center, you can use the [Contact Us](https://aws -## AWS account +## AWS account (not recommended) @@ -36 +36 @@ You can perform the following Support actions in the console. You can also speci -If you deny any of the below actions in your IAM policies, it could result in unintended behaviour in Support Center when creating or interacting with a support case. +Denying any of the following actions in your IAM policies, might result in unintended behavior in Support Center when creating or interacting with a support case. @@ -72 +72 @@ By default, IAM users can't access the Support Center. You can use IAM to create -After you create IAM users, you can give those users individual passwords and an account-specific sign-in page. They can then sign in to your AWS account and work in the Support Center. IAM users who have AWS Support access can see all cases that are created for the account. +After you create IAM users, you can give those users individual passwords and an account-specific sign-in page. They can then sign in to your and work in AWS account the Support Center. IAM users who have AWS Support access can see all cases that are created for the account.