AWS resource-explorer documentation change
Summary
Updated view hierarchy documentation with Resource Explorer-owned immutable views, automatic fallback behavior, and simplified setup requirements
Security assessment
While the changes introduce service-managed immutable views as security controls (preventing unauthorized modifications), there's no evidence of addressing a specific vulnerability. The documentation primarily explains operational reliability features rather than patching security issues.
Diff
diff --git a/resource-explorer/latest/userguide/configure-views-create.md b/resource-explorer/latest/userguide/configure-views-create.md index 4a3fcfe61..1e01d03f3 100644 --- a//resource-explorer/latest/userguide/configure-views-create.md +++ b//resource-explorer/latest/userguide/configure-views-create.md @@ -4,0 +5,2 @@ +AWS Resource Explorer now provides immediate access to resource search and discovery capabilities in a Region. With this launch, you no longer need to activate Resource Explorer to discover your resources. [Learn more](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-immediate-resource-discovery-experience.html) + @@ -7 +9,3 @@ -All searches must use a [view](./configure-views.html). A view defines filters that determine which resources can be returned by queries that use the view. Views also control who can search for resources. +All searches must use a [view](./customer-views.html#configure-views). A view defines filters that determine which resources can be returned by queries that use the view. Views also control who can search for resources. + +###### Resource Explorer-owned views @@ -9 +13 @@ All searches must use a [view](./configure-views.html). A view defines filters t -A view is stored in an AWS Region, and returns search results from only that Region's index. If the Region contains the [aggregator index](./manage-aggregator-region.html), then the view returns search results from the index in every Region in the account. +Resource Explorer provides Resource Explorer-owned views that are service-managed and cannot be modified or deleted by users. These views serve as automatic fallbacks to ensure search functionality remains available even when no user-owned views exist in a Region. Resource Explorer-owned views do not include resource tags in search results. @@ -11 +15 @@ A view is stored in an AWS Region, and returns search results from only that Reg -Multi-account views allow you to search for resources in accounts across your organization. Any account you wish to search requires indexes. Only the management account, or a delegated administrator for the organization, can create a multi-account view. +When automatic setup occurs, Resource Explorer creates a default user-owned view in each Region that includes Tags. The view hierarchy follows this priority: user-owned views are used first, with automatic fallback to Resource Explorer-owned views when no user-owned view is available. @@ -13 +17,3 @@ Multi-account views allow you to search for resources in accounts across your or -AWS Resource Explorer can create a default view for you during initial set up if you chose the relevant options in either [Quick Setup](https://console.aws.amazon.com/systems-manager/quick-setup/create-configuration?configurationType=AWSQuickSetupType-ResourceExplorer) for Resource Explorer in the Systems Manager console or [Advanced setup](./getting-started-setting-up.html#getting-started-setting-up-advanced). At any later time, you can create additional views that have different filters for different sets of users. +A view is stored in an AWS Region, and returns search results from only that Region's index. If the Region contains the [aggregator index](./manage-aggregator-region.html), then the view returns search results from the user-owned index in every Region in the account. + +Multi-account views allow you to search for resources in accounts across your organization. Only the management account, or a delegated administrator for the organization, can create a multi-account view. Resource Explorer can create a default view for you during initial set up if you chose the relevant options in either [Quick Setup](https://console.aws.amazon.com/systems-manager/quick-setup/create-configuration?configurationType=AWSQuickSetupType-ResourceExplorer) for Resource Explorer in the Systems Manager console. At any later time, you can create additional views that have different filters for different sets of users. @@ -19 +25 @@ You can create a view by using the AWS Management Console or by running AWS CLI -To run this procedure, you must have the following permissions: +To run this procedure, you must have the following permissions. Note that with Resource Explorer's automatic setup, view creation is optional since Resource Explorer-owned views provide fallback search functionality: @@ -24,0 +31,2 @@ To run this procedure, you must have the following permissions: + * **When view creation is needed:** While Resource Explorer automatically creates default views during setup and provides Resource Explorer-owned views as fallbacks, you may want to create custom views for specific filtering requirements, tag-based searches, or to control access permissions for different user groups. + @@ -162 +170 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Configuring Resource Explorer views +User views