AWS IAM documentation change
Summary
Updated passkey documentation with cross-device authentication details and content reorganization
Security assessment
The modifications improve clarity about MFA security features (passkey usage patterns) but do not indicate a security fix. The changes focus on user guidance rather than addressing vulnerabilities.
Diff
diff --git a/IAM/latest/UserGuide/id_credentials_mfa.md b/IAM/latest/UserGuide/id_credentials_mfa.md index c5755c7b3..55103a6b8 100644 --- a//IAM/latest/UserGuide/id_credentials_mfa.md +++ b//IAM/latest/UserGuide/id_credentials_mfa.md @@ -49 +49 @@ AWS Identity and Access Management supports passkeys and security keys for MFA. -You can use built-in biometric authenticators, like Touch ID on Apple MacBooks, to unlock your credential manager and sign in to AWS. Passkeys are created with your chosen provider using your fingerprint, face, or device PIN. You can sync passkeys across your devices to facilitate sign-ins with AWS, enhancing usability and recoverability. +You can use built-in biometric authenticators, like Touch ID on Apple MacBooks, to unlock your credential manager and sign in to AWS. Passkeys are created with your chosen provider using your fingerprint, face, or device PIN. You can also use a cross-device authentication (CDA) passkey from one device, like a mobile device or hardware security key, to sign in on another device like a laptop. For more information, see [cross-device authentication](https://passkeys.dev/docs/reference/terms/#cross-device-authentication-cda) (CDA). @@ -51 +51 @@ You can use built-in biometric authenticators, like Touch ID on Apple MacBooks, -IAM does not support local passkey registration for Windows Hello. To create and use passkeys, Windows users should use [cross-device authentication](https://passkeys.dev/docs/reference/terms/#cross-device-authentication-cda) (CDA). You can use a CDA passkey from one device, like a mobile device or hardware security key, to sign in on another device like a laptop. +You can sync passkeys across your devices to facilitate sign-ins with AWS, enhancing usability and recoverability. For more information about enabling passkeys and security keys, see [Enable a passkey or security key for the root user (console)](./enable-fido-mfa-for-root.html). @@ -55,2 +54,0 @@ The FIDO Alliance maintains a list of all [FIDO Certified products](https://fido -For more information about enabling passkeys and security keys, see [Enable a passkey or security key for the root user (console)](./enable-fido-mfa-for-root.html). -