AWS mpa documentation change
Summary
Updated documentation about consequences of deleting IAM Identity Center instance and recovery steps for Multi-party approval identity sources
Security assessment
The changes clarify operational recovery steps after IAM Identity Center deletion but do not address a specific security vulnerability. The documentation improves awareness of maintaining approval workflows, which is security-adjacent but not evidence of a resolved security issue.
Diff
diff --git a/mpa/latest/userguide/delete-identity-source.md b/mpa/latest/userguide/delete-identity-source.md index 76aa1675b..14df0b80e 100644 --- a//mpa/latest/userguide/delete-identity-source.md +++ b//mpa/latest/userguide/delete-identity-source.md @@ -110 +110 @@ To delete an identity source, you must first delete all teams associated with id -**Do not delete the IAM Identity Center instance that is connected to your identity source** +**Deleted IAM Identity Center instance** @@ -112 +112 @@ To delete an identity source, you must first delete all teams associated with id -Deleting the connected AWS IAM Identity Center instance will cause your Multi-party approval identity source and approval teams to enter an error state, disrupting your approval workflows. +If you deleted the IAM Identity Center instance connected to your identity source, you can still delete the Multi-party approval identity source. However, if you have active approval teams when the IAM Identity Center instance is deleted, these teams become non-functional. Approvers can no longer access the Multi-party approval portal to vote on sessions. To restore functionality, create a new IAM Identity Center instance with users and connect to a new identity source before you follow the approval team recovery process. @@ -114 +114 @@ Deleting the connected AWS IAM Identity Center instance will cause your Multi-pa -For steps on how to recover a Multi-party approval identity source that is in an error state, see [Troubleshooting](./troubleshooting.html). +For steps to recover approval teams that are in an error state, see [Troubleshooting](./troubleshooting.html).