AWS mpa documentation change

Service: mpa · 2025-08-10 · Documentation low

File: mpa/latest/userguide/cancel-session.md

Summary

Modified required permissions list by swapping SSO and Organizations service permissions

Security assessment

Permission adjustments for console access do not indicate security fixes or introduce security documentation.

Diff

diff --git a/mpa/latest/userguide/cancel-session.md b/mpa/latest/userguide/cancel-session.md
index 7f2c548e6..700f0d840 100644
--- a//mpa/latest/userguide/cancel-session.md
+++ b//mpa/latest/userguide/cancel-session.md
@@ -28 +28 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso:DescribeInstance`
+  * `organizations:DescribeOrganization`
@@ -30 +30 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso:GetSharedSsoConfiguration`
+  * `organizations:ListDelegatedAdministrators`
@@ -32 +32 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso-directory:DescribeUsers`
+  * `sso:DescribeInstance`
@@ -34 +34 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso-directory:SearchUsers`
+  * `sso:GetSharedSsoConfiguration`
@@ -38 +38 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `organizations:ListDelegatedAdministrators`
+  * `sso-directory:DescribeUsers`
@@ -40 +40 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `organizations:DescribeOrganization`
+  * `sso-directory:SearchUsers`