AWS awssupport documentation change
Summary
Updated links and check descriptions, including MFA root account guidance about deleting credentials and S3 permissions criteria.
Security assessment
Adds security documentation for MFA root account management (deleting credentials) and S3 permissions monitoring. Improves security best practices but does not fix a specific vulnerability.
Diff
diff --git a/awssupport/latest/user/aws-trusted-advisor-change-log.md b/awssupport/latest/user/aws-trusted-advisor-change-log.md index 25c13bd2e..0235c3981 100644 --- a//awssupport/latest/user/aws-trusted-advisor-change-log.md +++ b//awssupport/latest/user/aws-trusted-advisor-change-log.md @@ -32,2 +32,2 @@ Check name | Check ID | Description -[Amazon S3 Bucket Permissions](./security-checks.html#amazon-s3-bucket-permissions) | `Pfx0RwqBli` | The **Alert criteria** is updated to reflect all Yellow and Red criteria. -[Amazon EC2 instances with Ubuntu LTS end of standard support](./security-checks.html#amazon-ec2-instances-ubuntu-lts-end-of-standard-support) | `c1dfprch15` | Updated the note to indicate that this check refreshes at least once daily. +[Amazon S3 Bucket Permissions](https://docs.aws.amazon.com/awssupport/latest/user/security-checks.html#amazon-s3-bucket-permissions) | `Pfx0RwqBli` | The **Alert criteria** is updated to reflect all Yellow and Red criteria. +[Amazon EC2 instances with Ubuntu LTS end of standard support](https://docs.aws.amazon.com/awssupport/latest/user/security-checks.html#amazon-ec2-instances-ubuntu-lts-end-of-standard-support) | `c1dfprch15` | Updated the note to indicate that this check refreshes at least once daily. @@ -41,2 +41,2 @@ Check name | Check ID | Description -[Amazon ECS AWSLogs driver in blocking mode](./fault-tolerance-checks.html#amazon-ecs-awslogs-driver-blockingmode) | `c1dvkm4z6b` | Amazon ECS changed the default setting for awslogs driver logging configuration parameter mode from `blocking` to `non-blocking`. The Yellow status description has been updated to reflect this change. -[MFA on root account](./security-checks.html#mfa-root-account) | `7DAFEmoDos` | Added information indicating that member account root user credentials can be deleted centrally, removing the need to manage MFA on root user credentials. +[Amazon ECS AWSLogs driver in blocking mode](https://docs.aws.amazon.com/fault-tolerance-checks.html#amazon-ecs-awslogs-driver-blockingmode) | `c1dvkm4z6b` | Amazon ECS changed the default setting for awslogs driver logging configuration parameter mode from `blocking` to `non-blocking`. The Yellow status description has been updated to reflect this change. +[MFA on root account](https://docs.aws.amazon.com/awssupport/latest/user/security-checks.html#mfa-root-account) | `7DAFEmoDos` | Added information indicating that member account root user credentials can be deleted centrally, removing the need to manage MFA on root user credentials. @@ -50,2 +50,2 @@ Check name | Check ID | Description -[Amazon Aurora cost optimization recommendations for DB cluster storage](./cost-optimization-checks.html#aurora-cost-opt-db-cluster-storage) | `c1z7kmr17n` | New check -[AWS STS global endpoint usage across AWS Regions](./fault-tolerance-checks.html#sts-global-endpoint) | `c15m0mgld3` | Updated check: This check is now available at all AWS Support plan tiers. +[Amazon Aurora cost optimization recommendations for DB cluster storage](https://docs.aws.amazon.com/awssupport/latest/user/cost-optimization-checks.html#aurora-cost-opt-db-cluster-storage) | `c1z7kmr17n` | New check +[AWS STS global endpoint usage across AWS Regions](https://docs.aws.amazon.com/awssupport/latest/user/fault-tolerance-checks.html#sts-global-endpoint) | `c15m0mgld3` | Updated check: This check is now available at all AWS Support plan tiers. @@ -59 +59 @@ Check name | Check ID | Description -[AWS STS global endpoint usage across AWS Regions](./fault-tolerance-checks.html#sts-global-endpoint) | `c15m0mgld3` | New check +[AWS STS global endpoint usage across AWS Regions](https://docs.aws.amazon.com/awssupport/latest/user/fault-tolerance-checks.html#sts-global-endpoint) | `c15m0mgld3` | New check