AWS singlesignon documentation change
Summary
Updated error message phrasing from contractions (can't -> cannot, it's -> it is) and grammatical improvements throughout troubleshooting guide
Security assessment
Changes are grammatical improvements and phrasing updates without introducing new security content or addressing specific vulnerabilities. Modifications like 'can't' to 'cannot' and 'it's' to 'it is' are stylistic changes rather than security-related updates.
Diff
diff --git a/singlesignon/latest/userguide/troubleshooting.md b/singlesignon/latest/userguide/troubleshooting.md index d1eacf15d..f49aba47b 100644 --- a//singlesignon/latest/userguide/troubleshooting.md +++ b//singlesignon/latest/userguide/troubleshooting.md @@ -5 +5 @@ -Issues creating an account instance of IAM Identity CenterYou receive an error when you attempt to view the list of cloud applications that are preconfigured to work with IAM Identity CenterIssues regarding contents of SAML assertions created by IAM Identity CenterSpecific users fail to synchronize into IAM Identity Center from an external SCIM providerDuplicate user or group error when provisioning users or groups with an external identity providerUsers can’t sign in when their user name is in UPN formatI get a ‘Cannot perform the operation on the protected role' error when modifying an IAM roleDirectory users cannot reset their passwordMy user is referenced in a permission set but can’t access the assigned accounts or applicationsI can't get my application from the application catalog configured correctlyError 'An unexpected error has occurred' when a user tries to sign in using an external identity providerError 'Attributes for access control failed to enable'I get a 'Browser not supported' message when I attempt to register a device for MFAActive Directory “Domain Users” group does not properly sync into IAM Identity CenterInvalid MFA credentials errorI get a 'An unexpected error has occurred' message when I attempt to register or sign in using an authenticator appI get an 'It's not you, it's us' error when attempting to sign in to IAM Identity CenterMy users are not receiving emails from IAM Identity CenterError: You can't delete/modify/remove/assign access to permission sets provisioned in the management accountError: Session token not found or invalid +Issues creating an account instance of IAM Identity CenterYou receive an error when you attempt to view the list of cloud applications that are preconfigured to work with IAM Identity CenterIssues regarding contents of SAML assertions created by IAM Identity CenterSpecific users fail to synchronize into IAM Identity Center from an external SCIM providerDuplicate user or group error when provisioning users or groups with an external identity providerUsers can’t sign in when their user name is in UPN formatI get a ‘Cannot perform the operation on the protected role' error when modifying an IAM roleDirectory users cannot reset their passwordMy user is referenced in a permission set but can’t access the assigned accounts or applicationsI cannot get my application from the application catalog configured correctlyError 'An unexpected error has occurred' when a user tries to sign in using an external identity providerError 'Attributes for access control failed to enable'I get a 'Browser not supported' message when I attempt to register a device for MFAActive Directory “Domain Users” group does not properly sync into IAM Identity CenterInvalid MFA credentials errorI get a 'An unexpected error has occurred' message when I attempt to register or sign in using an authenticator appI get an 'It's not you, it is us' error when attempting to sign in to IAM Identity CenterMy users are not receiving emails from IAM Identity CenterError: You cannot delete/modify/remove/assign access to permission sets provisioned in the management accountError: Session token not found or invalid @@ -13 +13 @@ The following can help you troubleshoot some common issues you might encounter w -Several restrictions might apply when creating an account instance of IAM Identity Center. If you're unable to create an account instance through the IAM Identity Center console, or the setup experience of a supported AWS managed application, verify the following use cases: +Several restrictions might apply when creating an account instance of IAM Identity Center. If you are unable to create an account instance through the IAM Identity Center console, or the setup experience of a supported AWS managed application, verify the following use cases: @@ -197 +197 @@ You can also check to see if AWS CloudTrail recorded the failure by searching yo -## I can't get my application from the application catalog configured correctly +## I cannot get my application from the application catalog configured correctly @@ -260 +260 @@ Time-based one-time password (TOTP) systems, such as those used by IAM Identity -## I get an 'It's not you, it's us' error when attempting to sign in to IAM Identity Center +## I get an 'It's not you, it is us' error when attempting to sign in to IAM Identity Center @@ -264 +264 @@ This error indicates there is a setup problem with your instance of IAM Identity - * Verify the date and time settings on the device you're using to sign in. We recommend that you set the date and time to be set automatically. If that is not available, we recommend syncing your date and time to a known Network Time Protocol (NTP) server. + * Verify the date and time settings on the device you are using to sign in. We recommend that you set the date and time to be set automatically. If that is not available, we recommend syncing your date and time to a known Network Time Protocol (NTP) server. @@ -281 +281 @@ All emails sent by the IAM Identity Center service will come from either the add -## Error: You can't delete/modify/remove/assign access to permission sets provisioned in the management account +## Error: You cannot delete/modify/remove/assign access to permission sets provisioned in the management account @@ -287 +287 @@ This message indicates that the [Delegated administration](./delegated-admin.htm -This error can occur when a client, such as a web browser, AWS Toolkit, or AWS CLI, tries to use a session that's revoked or invalidated on the server side. To correct this issue, return to the client application or website and try again, including logging in again if prompted. This might sometimes require you to also cancel pending requests, such as a pending connection attempt from the AWS Toolkit within your IDE. +This error can occur when a client, such as a web browser, AWS Toolkit, or AWS CLI, tries to use a session that is revoked or invalidated on the server side. To correct this issue, return to the client application or website and try again, including logging in again if prompted. This might sometimes require you to also cancel pending requests, such as a pending connection attempt from the AWS Toolkit within your IDE.