AWS mpa documentation change
Summary
Reordered permissions for team deletion and modified console requirements
Security assessment
Changes appear to reorganize existing permissions rather than address a specific vulnerability. No evidence of security fixes in the diff.
Diff
diff --git a/mpa/latest/userguide/delete-team.md b/mpa/latest/userguide/delete-team.md index 7de3515ad..5035159fb 100644 --- a//mpa/latest/userguide/delete-team.md +++ b//mpa/latest/userguide/delete-team.md @@ -19,2 +18,0 @@ To delete a team, you need permission to run the following actions: - * `mpa:StartActiveApprovalTeamDeletion` (If deleting an active team) - @@ -22,0 +21,2 @@ To delete a team, you need permission to run the following actions: + * `mpa:StartActiveApprovalTeamDeletion` (If deleting an active team) + @@ -28 +28 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso:DescribeInstance` + * `organizations:DescribeOrganization` @@ -30 +30 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso:GetSharedSsoConfiguration` + * `organizations:ListDelegatedAdministrators` @@ -32 +32 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso-directory:DescribeUsers` + * `sso:DescribeInstance` @@ -34 +34 @@ If you are using the AWS Management Console, you also need permission to run the - * `sso-directory:SearchUsers` + * `sso:GetSharedSsoConfiguration` @@ -38 +38 @@ If you are using the AWS Management Console, you also need permission to run the - * `organizations:ListDelegatedAdministrators` + * `sso-directory:DescribeUsers` @@ -40 +40 @@ If you are using the AWS Management Console, you also need permission to run the - * `organizations:DescribeOrganization` + * `sso-directory:SearchUsers`