AWS singlesignon documentation change
Summary
Updated terminology from 'identity-aware' to 'identity-enhanced' throughout the document, including section headers, feature names, and related documentation links
Security assessment
The changes appear to be a branding/terminology update rather than addressing security vulnerabilities. While the documentation references required permissions (sts:setContext) and access controls, there's no evidence of a security fix or vulnerability mitigation. The modifications focus on feature renaming and documentation link updates without introducing new security mechanisms or addressing specific security weaknesses.
Diff
diff --git a/singlesignon/latest/userguide/identity-aware-sessions.md b/singlesignon/latest/userguide/identity-aware-sessions.md index c4ee830c6..0e006d554 100644 --- a//singlesignon/latest/userguide/identity-aware-sessions.md +++ b//singlesignon/latest/userguide/identity-aware-sessions.md @@ -5 +5 @@ -Prerequisites and considerationsHow to enable identity-aware-console sessionsHow identity-aware console sessions work +Prerequisites and considerationsHow to enable identity-enhanced-console sessionsHow identity-enhanced console sessions work @@ -7 +7 @@ Prerequisites and considerationsHow to enable identity-aware-console sessionsHow -# Enabling identity-aware console sessions +# Enabling identity-enhanced console sessions @@ -9 +9 @@ Prerequisites and considerationsHow to enable identity-aware-console sessionsHow -An identity-aware session for the console enhances a user's AWS console session by providing some additional user context to personalize that user's experience. This capability is currently supported for Amazon Q Developer Pro users of [Amazon Q on AWS apps and websites](https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/q-on-aws.html). +An identity-enhanced session for the console enhances a user's AWS console session by providing some additional user context to personalize that user's experience. This capability is currently supported for Amazon Q Developer Pro users of [Amazon Q on AWS apps and websites](https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/q-on-aws.html). @@ -11 +11 @@ An identity-aware session for the console enhances a user's AWS console session -You can enable identity-aware console sessions without making any changes to existing access patterns or federation into the AWS console. If your users sign in to the AWS console with IAM (for example, if they sign in as IAM users or through federated access with IAM), they can continue using these methods. If your users sign in to the AWS access portal, they can continue using their IAM Identity Center user credentials. +You can enable identity-enhanced console sessions without making any changes to existing access patterns or federation into the AWS console. If your users sign in to the AWS console with IAM (for example, if they sign in as IAM users or through federated access with IAM), they can continue using these methods. If your users sign in to the AWS access portal, they can continue using their IAM Identity Center user credentials. @@ -17 +17 @@ You can enable identity-aware console sessions without making any changes to exi - * How to enable identity-aware-console sessions + * How to enable identity-enhanced-console sessions @@ -19 +19 @@ You can enable identity-aware console sessions without making any changes to exi - * How identity-aware console sessions work + * How identity-enhanced console sessions work @@ -26 +26 @@ You can enable identity-aware console sessions without making any changes to exi -Before you enable identity-aware console sessions, review the following prerequisites and considerations: +Before you enable identity-enhanced console sessions, review the following prerequisites and considerations: @@ -28 +28 @@ Before you enable identity-aware console sessions, review the following prerequi - * If your users access Amazon Q on AWS apps and websites through an Amazon Q Developer Pro subscription, you must enable identity-aware console sessions. + * If your users access Amazon Q on AWS apps and websites through an Amazon Q Developer Pro subscription, you must enable identity-enhanced console sessions. @@ -32 +32 @@ Before you enable identity-aware console sessions, review the following prerequi -Amazon Q Developer users can access Amazon Q without identity-aware sessions, but they won't have access to their Amazon Q Developer Pro subscriptions. +Amazon Q Developer users can access Amazon Q without identity-enhanced sessions, but they won't have access to their Amazon Q Developer Pro subscriptions. @@ -34 +34 @@ Amazon Q Developer users can access Amazon Q without identity-aware sessions, bu - * Identity-aware console sessions require an [organization instance](./organization-instances-identity-center.html) of IAM Identity Center. + * Identity-enhanced console sessions require an [organization instance](./organization-instances-identity-center.html) of IAM Identity Center. @@ -38 +38 @@ Amazon Q Developer users can access Amazon Q without identity-aware sessions, bu - * To enable identity-aware console sessions, you must have the following permissions: + * To enable identity-enhanced console sessions, you must have the following permissions: @@ -58 +58 @@ Amazon Q Developer users can access Amazon Q without identity-aware sessions, bu - * To enable your users to use identity-aware console sessions, you must grant them the `sts:setContext` permission in an identity-based policy. For information, see [Granting users permissions to use identity-aware console sessions](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_sts-setcontext.html). + * To enable your users to use identity-enhanced console sessions, you must grant them the `sts:setContext` permission in an identity-based policy. For information, see [Granting users permissions to use identity-enhanced console sessions](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_sts-setcontext.html). @@ -63 +63 @@ Amazon Q Developer users can access Amazon Q without identity-aware sessions, bu -## How to enable identity-aware-console sessions +## How to enable identity-enhanced-console sessions @@ -65 +65 @@ Amazon Q Developer users can access Amazon Q without identity-aware sessions, bu -You can enable identity-aware console sessions in the Amazon Q console or in the IAM Identity Center console. +You can enable identity-enhanced console sessions in the Amazon Q console or in the IAM Identity Center console. @@ -67 +67 @@ You can enable identity-aware console sessions in the Amazon Q console or in the -###### Enable identity-aware console sessions in the Amazon Q console +###### Enable identity-enhanced console sessions in the Amazon Q console @@ -69 +69 @@ You can enable identity-aware console sessions in the Amazon Q console or in the -Before you enable identity-aware console sessions, you must have an organization instance of IAM Identity Center with an identity source connected. If you've already configured IAM Identity Center, skip to step 3. +Before you enable identity-enhanced console sessions, you must have an organization instance of IAM Identity Center with an identity source connected. If you've already configured IAM Identity Center, skip to step 3. @@ -75 +75 @@ Before you enable identity-aware console sessions, you must have an organization - 3. After you finish setting up IAM Identity Center, open the Amazon Q console and follow the steps in [Subscriptions](https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/q-admin-setup-subscribe-management-account.html) in the _Amazon Q Developer User Guide_. Make sure to enable identity-aware console sessions. + 3. After you finish setting up IAM Identity Center, open the Amazon Q console and follow the steps in [Subscriptions](https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/q-admin-setup-subscribe-management-account.html) in the _Amazon Q Developer User Guide_. Make sure to enable identity-enhanced console sessions. @@ -79 +79 @@ Before you enable identity-aware console sessions, you must have an organization -If you don't have sufficient permissions to enable identity-aware console sessions, you might need to ask an IAM Identity Center administrator to perform this task for you in the IAM Identity Center console. For more information, see the next procedure. +If you don't have sufficient permissions to enable identity-enhanced console sessions, you might need to ask an IAM Identity Center administrator to perform this task for you in the IAM Identity Center console. For more information, see the next procedure. @@ -84 +84 @@ If you don't have sufficient permissions to enable identity-aware console sessio -###### Enable identity-aware console sessions in the IAM Identity Center console +###### Enable identity-enhanced console sessions in the IAM Identity Center console @@ -86 +86 @@ If you don't have sufficient permissions to enable identity-aware console sessio -If you're an IAM Identity Center administrator, you might be asked by another administrator to enable identity-aware console sessions in the IAM Identity Center console. +If you're an IAM Identity Center administrator, you might be asked by another administrator to enable identity-enhanced console sessions in the IAM Identity Center console. @@ -92 +92 @@ If you're an IAM Identity Center administrator, you might be asked by another ad - 3. Under **Enable identity-aware sessions** , choose **Enable**. + 3. Under **Enable identity-enhanced sessions** , choose **Enable**. @@ -96 +96 @@ If you're an IAM Identity Center administrator, you might be asked by another ad - 5. After you finish enabling identity-aware console sessions, a confirmation message appears at the top of the **Settings** page. + 5. After you finish enabling identity-enhanced console sessions, a confirmation message appears at the top of the **Settings** page. @@ -98 +98 @@ If you're an IAM Identity Center administrator, you might be asked by another ad - 6. In the **Details** section, the status for **Identity-aware sessions** is **Enabled**. + 6. In the **Details** section, the status for **Identity-enhanced sessions** is **Enabled**. @@ -103 +103 @@ If you're an IAM Identity Center administrator, you might be asked by another ad -## How identity-aware console sessions work +## How identity-enhanced console sessions work @@ -107 +107 @@ IAM Identity Center enhances a user's current console session to include the act -Identity-aware console sessions include the following three values: +Identity-enhanced console sessions include the following three values: