AWS controltower documentation change
Summary
Updated account provisioning documentation with new links to auto-enrollment, Terraform AFT, and organizational unit requirements
Security assessment
The changes clarify account management processes and provisioning methods without introducing security controls or addressing vulnerabilities. The mention of organizational unit (OU) requirements relates to structural governance rather than direct security measures.
Diff
diff --git a/controltower/latest/userguide/member-accounts.md b/controltower/latest/userguide/member-accounts.md index f6c8c9dba..c501e9e9a 100644 --- a//controltower/latest/userguide/member-accounts.md +++ b//controltower/latest/userguide/member-accounts.md @@ -7 +7,3 @@ -Member accounts are the accounts through which your users perform their AWS workloads. These member accounts can be created in Account Factory, by IAM Identity Center users with **Admin** privileges in the Service Catalog console, or by automated methods. When created, these member accounts exist in an OU that was created in the AWS Control Tower console, or registered with AWS Control Tower. For more information, see these related topics: +Member accounts are the accounts through which your users perform their AWS workloads. AWS Control Tower member accounts can be created and customized by various methods, including automated methods. In some cases, you can bring existing AWS accounts into AWS Control Tower. When member accounts are created or enrolled, they must exist inside an organizational unit (OU) that was created in the AWS Control Tower console, or registered with AWS Control Tower. For more information, see these related topics: + + * [Methods of provisioning](https://docs.aws.amazon.com/controltower/latest/userguide/methods-of-provisioning.html) @@ -13 +15 @@ Member accounts are the accounts through which your users perform their AWS work - * [AWS Organizations Terminology and Concepts](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html) in the _AWS Organizations User Guide_. + * [Move and enroll accounts with auto-enrollment](./account-auto-enrollment.html) @@ -14,0 +17,3 @@ Member accounts are the accounts through which your users perform their AWS work + * [ Provision accounts with AWS Control Tower Account Factory for Terraform (AFT) ](./taf-account-provisioning.html) + + * [AWS Organizations Terminology and Concepts](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html) in the _AWS Organizations User Guide_. @@ -18 +22,0 @@ Member accounts are the accounts through which your users perform their AWS work -Also see [ Provision accounts with AWS Control Tower Account Factory for Terraform (AFT) ](./taf-account-provisioning.html). @@ -34 +38 @@ Shared account resources -Enroll an existing AWS account +Interact with AWS Control Tower accounts from AWS Service Catalog