AWS mpa documentation change

Service: mpa · 2025-08-10 · Documentation low

File: mpa/latest/userguide/update-team.md

Summary

Updated required IAM permissions by replacing SSO-related actions with Organizations actions and reorganizing permissions order

Security assessment

The changes update required permissions for console access but do not indicate a security vulnerability fix. This appears to be a documentation correction for proper permission configuration rather than addressing a specific security issue.

Diff

diff --git a/mpa/latest/userguide/update-team.md b/mpa/latest/userguide/update-team.md
index efb27cba0..3feace141 100644
--- a//mpa/latest/userguide/update-team.md
+++ b//mpa/latest/userguide/update-team.md
@@ -28 +28 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso:DescribeInstance`
+  * `organizations:DescribeOrganization`
@@ -30 +30 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso:GetSharedSsoConfiguration`
+  * `organizations:ListDelegatedAdministrators`
@@ -32 +32 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso-directory:DescribeUsers`
+  * `sso:DescribeInstance`
@@ -34 +34 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `sso-directory:SearchUsers`
+  * `sso:GetSharedSsoConfiguration`
@@ -38 +38 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `organizations:ListDelegatedAdministrators`
+  * `sso-directory:DescribeUsers`
@@ -40 +40 @@ If you are using the AWS Management Console, you also need permission to run the
-  * `organizations:DescribeOrganization`
+  * `sso-directory:SearchUsers`