AWS lake-formation documentation change
Summary
Updated trusted identity propagation documentation with revised explanations and links
Security assessment
Clarifies security-related access control feature but does not indicate security fixes
Diff
diff --git a/lake-formation/latest/dg/identity-center-integration.md b/lake-formation/latest/dg/identity-center-integration.md index da34e00e2..1d9342d4c 100644 --- a//lake-formation/latest/dg/identity-center-integration.md +++ b//lake-formation/latest/dg/identity-center-integration.md @@ -15,3 +15 @@ Users from your organization can sign in to any Identity Center enabled applicat -###### Note - -Trusted identity propagation allows users' existing user and group memberships to access data across AWS analytics services. With trusted identity propagation, a user can sign in to an application, and the application can pass the user's identity in requests to access data in AWS services. You don't need to perform any service-specific identity provider configurations or IAM role setups. Users can't sign in to the AWS Management Console using the trusted identity propagation. For more information, see [Trusted identity propagation across application](https://docs.aws.amazon.com/singlesignon/latest/userguide/trustedidentitypropagation.html) in the AWS IAM Identity Center User Guide. +[Trusted identity propagation](https://docs.aws.amazon.com/singlesignon/latest/userguide/trustedidentitypropagation-overview.html) is an AWS IAM Identity Center feature that administrators of connected AWS services can use to grant and audit access to service data. Access to this data is based on user attributes such as group associations. Setting up trusted identity propagation requires collaboration between the administrators of connected AWS services and the IAM Identity Center administrators. For more information, see [Prerequisites and considerations](https://docs.aws.amazon.com/singlesignon/latest/userguide/trustedidentitypropagation-overall-prerequisites.html).