AWS mpa documentation change
Summary
Updated required permissions list by reordering SSO and Organizations service permissions
Security assessment
Permission list changes reflect administrative requirements adjustments but do not address security vulnerabilities or add security features.
Diff
diff --git a/mpa/latest/userguide/admin-view-team.md b/mpa/latest/userguide/admin-view-team.md index da6dec82a..cb10afc75 100644 --- a//mpa/latest/userguide/admin-view-team.md +++ b//mpa/latest/userguide/admin-view-team.md @@ -28 +28 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso:DescribeInstance` + * `organizations:DescribeOrganization` @@ -30 +30 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso:GetSharedSsoConfiguration` + * `organizations:ListDelegatedAdministrators` @@ -32 +32 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso-directory:DescribeUsers` + * `sso:DescribeInstance` @@ -34 +34 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso-directory:SearchUsers` + * `sso:GetSharedSsoConfiguration` @@ -38 +38 @@ If you are using the AWS Management Console, you also need permission to run the - * `organizations:ListDelegatedAdministrators` + * `sso-directory:DescribeUsers` @@ -40 +40 @@ If you are using the AWS Management Console, you also need permission to run the - * `organizations:DescribeOrganization` + * `sso-directory:SearchUsers`