AWS athena documentation change
Summary
Replaced general description of trusted identity propagation with official documentation link and prerequisite information
Security assessment
Update provides more precise references to IAM Identity Center documentation but does not introduce new security features or address specific vulnerabilities. The change improves accuracy by directing users to authoritative sources rather than modifying security-related content.
Diff
diff --git a/athena/latest/ug/workgroups-identity-center.md b/athena/latest/ug/workgroups-identity-center.md index 94cec76a9..269e191a5 100644 --- a//athena/latest/ug/workgroups-identity-center.md +++ b//athena/latest/ug/workgroups-identity-center.md @@ -9 +9 @@ Considerations and limitationsCreating an IAM Identity Center enabled Athena wor -The trusted identity propagation feature of AWS IAM Identity Center permits your workforce identities to be used across AWS analytics services. Trusted identity propagation saves you from having to perform service-specific identity provider configurations or IAM role setups. This feature is now supported in both EMR Studio and SageMaker Unified Studio for Athena SQL workgroups. +[Trusted identity propagation](https://docs.aws.amazon.com/singlesignon/latest/userguide/trustedidentitypropagation-overview.html) is an AWS IAM Identity Center feature that administrators of connected AWS services can use to grant and audit access to service data. Access to this data is based on user attributes such as group associations. Setting up trusted identity propagation requires collaboration between the administrators of connected AWS services and the IAM Identity Center administrators. For more information, see [Prerequisites and considerations](https://docs.aws.amazon.com/singlesignon/latest/userguide/trustedidentitypropagation-overall-prerequisites.html). @@ -11 +11 @@ The trusted identity propagation feature of AWS IAM Identity Center permits your -With IAM Identity Center, you can manage sign-in security for your workforce identities, also known as workforce users. IAM Identity Center provides one place where you can create or connect workforce users and centrally manage their access across all their AWS accounts and applications. You can use multi-account permissions to assign these users access to AWS accounts. You can use application assignments to assign your users access to IAM Identity Center enabled applications, cloud applications, and customer Security Assertion Markup Language (SAML 2.0) applications. For more information, see [Trusted identity propagation across applications](https://docs.aws.amazon.com/singlesignon/latest/userguide/trustedidentitypropagation.html) in the _AWS IAM Identity Center User Guide_. +With [IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html), you can manage sign-in security for your workforce identities, also known as workforce users. IAM Identity Center provides one place where you can create or connect workforce users and centrally manage their access across all their AWS accounts and applications. You can use multi-account permissions to assign these users access to AWS accounts. You can use application assignments to assign your users access to IAM Identity Center enabled applications, cloud applications, and customer Security Assertion Markup Language (SAML 2.0) applications. For more information, see [Trusted identity propagation across applications](https://docs.aws.amazon.com/singlesignon/latest/userguide/trustedidentitypropagation.html) in the _AWS IAM Identity Center User Guide_.