AWS mpa documentation change
Summary
Updated required permissions list by reorganizing SSO and Organizations service requirements
Security assessment
Changes to permission prerequisites for team creation are administrative updates without security implications.
Diff
diff --git a/mpa/latest/userguide/create-team.md b/mpa/latest/userguide/create-team.md index e37c6820a..30170f467 100644 --- a//mpa/latest/userguide/create-team.md +++ b//mpa/latest/userguide/create-team.md @@ -30 +30 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso:DescribeInstance` + * `organizations:DescribeOrganization` @@ -32 +32 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso:GetSharedSsoConfiguration` + * `organizations:ListDelegatedAdministrators` @@ -34 +34 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso-directory:DescribeUsers` + * `sso:DescribeInstance` @@ -36 +36 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso-directory:SearchUsers` + * `sso:GetSharedSsoConfiguration` @@ -40 +40 @@ If you are using the AWS Management Console, you also need permission to run the - * `organizations:ListDelegatedAdministrators` + * `sso-directory:DescribeUsers` @@ -42 +42 @@ If you are using the AWS Management Console, you also need permission to run the - * `organizations:DescribeOrganization` + * `sso-directory:SearchUsers`