AWS directoryservice documentation change
Summary
Added documentation for HybridAdministratorAccountUpdate API, including details about using AWS Secrets Manager to store AD administrator credentials for hybrid domain join
Security assessment
The change documents secure credential management via AWS Secrets Manager, which is a security best practice. However, there is no evidence of addressing a specific existing vulnerability.
Diff
diff --git a/directoryservice/latest/devguide/API_HybridAdministratorAccountUpdate.md b/directoryservice/latest/devguide/API_HybridAdministratorAccountUpdate.md index 8b1378917..870040653 100644 --- a//directoryservice/latest/devguide/API_HybridAdministratorAccountUpdate.md +++ b//directoryservice/latest/devguide/API_HybridAdministratorAccountUpdate.md @@ -0,0 +1 @@ +[](/pdfs/directoryservice/latest/devguide/directoryservice-api.pdf#API_HybridAdministratorAccountUpdate "Open PDF") @@ -1,0 +3,57 @@ +[Documentation](/index.html)[AWS Directory Service](/directory-service/index.html)[API Reference](welcome.html) + +ContentsSee Also + +# HybridAdministratorAccountUpdate + +Use to recover to the hybrid directory administrator account credentials. + +## Contents + +**SecretArn** + + +The Amazon Resource Name (ARN) of the AWS Secrets Manager secret that contains the credentials for the AD administrator user, and enables hybrid domain controllers to join the managed AD domain. For example: + +` {"customerAdAdminDomainUsername":"carlos_salazar","customerAdAdminDomainPassword":"ExamplePassword123!"}. ` + +Type: String + +Pattern: `^arn:aws:secretsmanager:[a-z0-9-]+:\d{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` + +Required: Yes + +## See Also + +For more information about using this API in one of the language-specific AWS SDKs, see the following: + + * [AWS SDK for C++](https://docs.aws.amazon.com/goto/SdkForCpp/ds-2015-04-16/HybridAdministratorAccountUpdate) + + * [AWS SDK for Java V2](https://docs.aws.amazon.com/goto/SdkForJavaV2/ds-2015-04-16/HybridAdministratorAccountUpdate) + + * [AWS SDK for Ruby V3](https://docs.aws.amazon.com/goto/SdkForRubyV3/ds-2015-04-16/HybridAdministratorAccountUpdate) + + + + + **Javascript is disabled or is unavailable in your browser.** + +To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions. + +[Document Conventions](/general/latest/gr/docconventions.html) + +EventTopic + +HybridCustomerInstancesSettings + +Did this page help you? - Yes + +Thanks for letting us know we're doing a good job! + +If you've got a moment, please tell us what we did right so we can do more of it. + +Did this page help you? - No + +Thanks for letting us know this page needs work. We're sorry we let you down. + +If you've got a moment, please tell us how we can make the documentation better.