AWS solutions documentation change
Summary
Updated template names and clarified IAM role retention during uninstallation
Security assessment
Clarification about IAM role retention helps maintain security continuity for active remediations. The change emphasizes proper security hygiene during solution removal without introducing new features.
Diff
diff --git a/solutions/latest/automated-security-response-on-aws/v1.4.0.md b/solutions/latest/automated-security-response-on-aws/v1.4.0.md index ee6b6e1e8..40651f690 100644 --- a//solutions/latest/automated-security-response-on-aws/v1.4.0.md +++ b//solutions/latest/automated-security-response-on-aws/v1.4.0.md @@ -9 +9 @@ - 1. Remove the `aws-sharr-member.template` from each member account. + 1. Remove the `automated-security-response-member.template` from each member account. @@ -11 +11 @@ - 2. Remove the `aws-sharr-admin.template` from the admin account. + 2. Remove the `automated-security-response-admin.template` from the admin account. @@ -20 +20 @@ For each StackSet, remove stacks, then remove the StackSet in the reverse order -Note that IAM roles from the `aws-sharr-member-roles.template` are retained even if the template is removed. This is so that remediations using these roles continue to function. These SO0111-* roles can be manually removed after verifying that they are no longer in use by active remediations, such as CloudTrail to CloudWatch logging, or RDS Enhanced Monitoring. +Note that IAM roles from the `automated-security-response-member-roles.template` are retained even if the template is removed. This is so that remediations using these roles continue to function. These SO0111-* roles can be manually removed after verifying that they are no longer in use by active remediations, such as CloudTrail to CloudWatch logging, or RDS Enhanced Monitoring.