AWS singlesignon documentation change
Summary
Updated documentation links and references to include group access in addition to user access for AWS account assignments
Security assessment
The changes expand references from 'user access' to 'user or group access' in permission set assignments, improving documentation accuracy but not addressing a specific security vulnerability. While related to access control concepts, there's no evidence this fixes an existing security issue or introduces new security features.
Diff
diff --git a/singlesignon/latest/userguide/howtogetcredentials.md b/singlesignon/latest/userguide/howtogetcredentials.md index 5937fbef7..a686d1dd4 100644 --- a//singlesignon/latest/userguide/howtogetcredentials.md +++ b//singlesignon/latest/userguide/howtogetcredentials.md @@ -25 +25 @@ To get temporary credentials for your IAM Identity Center user, you'll need the - * **An IAM Identity Center user** – You'll sign in to the AWS access portal as this user. You or your administrator might create this user. For information about how to enable IAM Identity Center and create an IAM Identity Center user, see [Get started with common tasks in IAM Identity Center](./getting-started.html). + * **An IAM Identity Center user** – You'll sign in to the AWS access portal as this user. You or your administrator might create this user. For information about how to enable IAM Identity Center and create an IAM Identity Center user, see [Getting started with IAM Identity Center](./getting-started.html). @@ -27 +27 @@ To get temporary credentials for your IAM Identity Center user, you'll need the - * **User access to an AWS account** – To grant an IAM Identity Center user permission to retrieve their temporary credentials, you or an administrator must assign the IAM Identity Center user to a [permission set](./permissionsetsconcept.html). Permission sets are stored in IAM Identity Center and define the level of access that an IAM Identity Center user has to an AWS account. If your administrator created the IAM Identity Center user for you, ask them to add this access for you. For more information, see [Assign user access to AWS accounts](./assignusers.html). + * **User access to an AWS account** – To grant an IAM Identity Center user permission to retrieve their temporary credentials, you or an administrator must assign the IAM Identity Center user to a [permission set](./permissionsetsconcept.html). Permission sets are stored in IAM Identity Center and define the level of access that an IAM Identity Center user has to an AWS account. If your administrator created the IAM Identity Center user for you, ask them to add this access for you. For more information, see [Assign user or group access to AWS accounts](./assignusers.html). @@ -82 +82 @@ For more information, see [Configure your profile with the `aws configure sso wi -If you don't see any **AWS accounts** listed, it's likely that you've not yet been assigned to a permission set for that account. In this case, contact your administrator and ask them to add this access for you. For more information, see [Assign user access to AWS accounts](./assignusers.html). +If you don't see any **AWS accounts** listed, it's likely that you've not yet been assigned to a permission set for that account. In this case, contact your administrator and ask them to add this access for you. For more information, see [Assign user or group access to AWS accounts](./assignusers.html). @@ -111 +111 @@ You can run AWS CLI commands until your temporary credentials expire. -If you don't see any **AWS accounts** listed, it's likely that you've not yet been assigned to a permission set for that account. In this case, contact your administrator and ask them to add this access for you. For more information, see [Assign user access to AWS accounts](./assignusers.html). +If you don't see any **AWS accounts** listed, it's likely that you've not yet been assigned to a permission set for that account. In this case, contact your administrator and ask them to add this access for you. For more information, see [Assign user or group access to AWS accounts](./assignusers.html).