AWS resource-explorer documentation change
Summary
Updated documentation for AWS Resource Explorer's Unified Search, clarifying activation requirements, permission dependencies, and search behavior. Added links to managed policies and simplified setup steps by making aggregator indexes optional.
Security assessment
The changes emphasize permission requirements (specifically the AWSResourceExplorerReadOnlyAccess policy) and clarify that access to search results is permission-based. While this improves security documentation, there is no evidence of addressing a specific vulnerability or security incident.
Diff
diff --git a/resource-explorer/latest/userguide/using-unified-search.md b/resource-explorer/latest/userguide/using-unified-search.md index bc56a7b59..7d0027250 100644 --- a//resource-explorer/latest/userguide/using-unified-search.md +++ b//resource-explorer/latest/userguide/using-unified-search.md @@ -5 +5 @@ -Checking if unified search is enabledTurning on unified search +Checking if resource search is enabledEnabling Unified Search @@ -7 +7 @@ Checking if unified search is enabledTurning on unified search -# Using unified search in the AWS Management Console +AWS Resource Explorer now provides immediate access to resource search and discovery capabilities in a Region. With this launch, you no longer need to activate Resource Explorer to discover your resources. [Learn more](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-immediate-resource-discovery-experience.html) @@ -9 +9 @@ Checking if unified search is enabledTurning on unified search -The AWS Management Console includes a search bar at the top of every AWS console page. This search bar can search the AWS service documentation and blog topics, and take you directly to AWS service console pages. It can also return the resources in your AWS account, if you turn on the unified search feature by turning on the required Resource Explorer features. +# Using Unified Search in the AWS Management Console @@ -11 +11,5 @@ The AWS Management Console includes a search bar at the top of every AWS console -With unified search, your users can search for resources from _**any**_ AWS service console without having to first navigate to the AWS Resource Explorer console. +The AWS Management Console includes a search bar at the top of every AWS console page. This search bar can search the AWS service documentation and blog topics, and take you directly to AWS service console pages. It can also return the resources in your AWS account when you have appropriate Resource Explorer permissions. + +With [Unified Search](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/using-search.html), users can search for resources from _**any**_ AWS service console without having to first navigate to the AWS Resource Explorer console. Unified Search returns regional results from the current Region by default, or cross-region results if an aggregator index is configured. + +Access to resource results in Unified Search is permission-based. Users with, at minimum, the permissions in the `[AWSResourceExplorerReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSResourceExplorerReadOnlyAccess.html)` managed policy can immediately search for resources in any Region where they have access, with results varying based on their permission level and the type of indexes available in the Region. @@ -15 +19 @@ With unified search, your users can search for resources from _**any**_ AWS serv -When you want to use the unified search bar to search specifically for resources, begin your search query by typing `/Resources`. This causes AWS resources to be ranked higher in the search results than results that do not represent resources. +When you want to use the Unified Search bar to search specifically for resources, begin your search query by typing `/Resources`. This causes AWS resources to be ranked higher in the search results than results that do not represent resources. @@ -19 +23 @@ When you want to use the unified search bar to search specifically for resources - * Checking if unified search is enabled + * Checking if resource search is enabled @@ -21 +25 @@ When you want to use the unified search bar to search specifically for resources - * Turning on unified search + * Enabling Unified Search @@ -28 +32 @@ When you want to use the unified search bar to search specifically for resources -Unified search automatically inserts a wildcard character (`*`) operator at the end of the first keyword in the string. This means that unified search results include resources that match any string that starts with the specified keyword. +Unified Search automatically inserts a wildcard character (`*`) operator at the end of the first keyword in the string. This means that unified search results include resources that match any string that starts with the specified keyword. @@ -32,9 +36 @@ The search performed by the **Query** text box on the [Resource search](https:// -## Checking if unified search is enabled - -To see if unified search is enabled in your AWS account, look at the top of the **[Settings](https://console.aws.amazon.com/resource-explorer/home#/settings)** page. Resource Explorer displays the current status of each requirement there. The requirements for unified search are as follows: - - * You must turn on Resource Explorer in at least one AWS Region. Only resources in Regions with Resource Explorer indexes can appear in unified search results. - - * You must create an aggregator index in the Region of your choice. Searches performed in this Region return results from all registered Regions in the account. - - * You must create a default view in the Region that contains the aggregator index. All users who need to use unified search for resources must have permission to use this default view. +## Checking if resource search is enabled @@ -42 +38 @@ To see if unified search is enabled in your AWS account, look at the top of the - * Users must have an AWS Identity and Access Management (IAM) permissions policy assigned to their IAM principal that grants permission to perform the `resource-explorer-2:Get*`, `resource-explorer-2:List*`, `resource-explorer-2:Describe*`,`resource-explorer-2:Search` actions. You can grant these permissions by using your own custom IAM policies. These permissions are already included as part of the following AWS managed policies that are available for your use: +To see if resource search is enabled in your AWS account, verify that the following requirements for Resource Explorer are met: @@ -44 +40 @@ To see if unified search is enabled in your AWS account, look at the top of the - * [AWSResourceExplorerReadOnlyAccess](./security_iam_awsmanpol.html#security_iam_awsmanpol_AWSResourceExplorerReadOnlyAccess) + * Users must have, at minimum, the permissions in the `[AWSResourceExplorerReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSResourceExplorerReadOnlyAccess.html)` managed policy. Resource Explorer automatically provides search functionality, with results varying based on permission level and index type (user-owned indexes provide complete results, Resource Explorer-owned indexes provide partial results). @@ -46 +42 @@ To see if unified search is enabled in your AWS account, look at the top of the - * [AWSResourceExplorerFullAccess](./security_iam_awsmanpol.html#security_iam_awsmanpol_AWSResourceExplorerFullAccess) + * (Optional) For cross-region search results, you can create an aggregator index in a Region of your choice. Without an aggregator, Unified Search returns regional results from the current Region. @@ -51 +47 @@ To see if unified search is enabled in your AWS account, look at the top of the -## Turning on unified search +## Enabling Unified Search @@ -53 +49 @@ To see if unified search is enabled in your AWS account, look at the top of the -To enable including your account's resources in the search results for unified search from any AWS console, you must complete the following steps: +Resource search in Unified Search is automatically available when users have appropriate Resource Explorer permissions. To enhance Unified Search functionality with full results, cross-Region results, or custom views, you can optionally complete the following steps: @@ -55 +51 @@ To enable including your account's resources in the search results for unified s - 1. [Activate AWS Resource Explorer in one or more AWS Regions in your account.](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-service-register.html) + 1. (Optional) [Completing setup for Resource Explorer](./manage-service-turn-on-region.html) to create user-owned indexes for complete search results. @@ -57 +53 @@ To enable including your account's resources in the search results for unified s - 2. [Register one Region to contain the aggregator index.](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-aggregator-region.html) + 2. (Optional) [Enabling cross-Region search by creating an aggregator index](./manage-aggregator-region.html) to enable cross-Region search results. @@ -59 +55 @@ To enable including your account's resources in the search results for unified s - 3. [Create a default view in the Region with the aggregator index.](https://docs.aws.amazon.com/resource-explorer/latest/userguide/configure-views.html) + 3. (Optional) [Configuring a Resource Explorer view to provide access to resource searches](./customer-views.html#configure-views) for specific filtering requirements or access control.