AWS controltower documentation change
Summary
Updated documentation headings and descriptions to clarify interaction with AWS Control Tower accounts through Service Catalog, including added references to Service Catalog APIs for programmatic provisioning.
Security assessment
The changes focus on improving clarity about account provisioning workflows and automation methods (e.g., adding Service Catalog APIs as an option). There is no mention of security vulnerabilities, access control changes, or security best practices. The updates are procedural/terminology improvements rather than security-related.
Diff
diff --git a/controltower/latest/userguide/provision-as-end-user.md b/controltower/latest/userguide/provision-as-end-user.md index 1df401c89..4e7a79668 100644 --- a//controltower/latest/userguide/provision-as-end-user.md +++ b//controltower/latest/userguide/provision-as-end-user.md @@ -5 +5 @@ -# Provision accounts with AWS Service Catalog Account Factory +# Provision accounts in the Service Catalog console, with Account Factory @@ -7 +7 @@ -The following procedure describes how to create and provision accounts as a user in IAM Identity Center through AWS Service Catalog. This procedure also is referred to as _advanced account provisioning_ , or _manual account provisioning_. Optionally, you may be able to provision accounts programmatically, with the AWS CLI or with AWS Control Tower Account Factory for Terraform (AFT). You may be able to provision customized accounts in the console if you've previously set up custom blueprints. For more information about customization, see [Customize accounts with Account Factory Customization (AFC)](./af-customization-page.html). +The following procedure describes how to create and provision accounts as a user in IAM Identity Center through AWS Service Catalog. This procedure also is referred to as _advanced account provisioning_ , or _manual account provisioning_. Optionally, you may be able to provision AWS Control Tower accounts programmatically, with the AWS CLI, with Service Catalog APIs, or with AWS Control Tower Account Factory for Terraform (AFT). You may be able to provision customized accounts in the console if you've previously set up custom blueprints. For more information about customization, see [Customize accounts with Account Factory Customization (AFC)](./af-customization-page.html). @@ -52 +52 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Account Factory +Interact with AWS Control Tower accounts from AWS Service Catalog @@ -54 +54 @@ Account Factory -Update and move accounts +Automate Account Provisioning in AWS Control Tower by Service Catalog APIs