AWS mpa documentation change

Service: mpa · 2025-10-19 · Documentation low

File: mpa/latest/userguide/troubleshooting.md

Summary

Added detailed recovery process for approval teams after IAM Identity Center instance deletion

Security assessment

The new section provides procedural guidance for restoring approval teams post-IAM Identity Center deletion. While related to maintaining security workflows, there is no evidence of a patched vulnerability or exploit mitigation.

Diff

diff --git a/mpa/latest/userguide/troubleshooting.md b/mpa/latest/userguide/troubleshooting.md
index 03c930a86..a482d3ac6 100644
--- a//mpa/latest/userguide/troubleshooting.md
+++ b//mpa/latest/userguide/troubleshooting.md
@@ -10,0 +11,2 @@ To help you understand Multi-party approval, this topic describes troubleshootin
+  * Recover teams after IAM Identity Center instance deletion
+
@@ -19,0 +22,39 @@ To help you understand Multi-party approval, this topic describes troubleshootin
+Recover teams after IAM Identity Center instance deletion
+    
+
+Problem
+    
+
+When you delete the IAM Identity Center instance that is connected to your Multi-party approval identity source, your approval teams will enter an error state. In this state, approvers can no longer access the Multi-party approval portal to vote on sessions, making the teams non-functional.
+
+Solution
+    
+
+**Prerequisites**
+
+Before starting the recovery process, check that:
+
+  * Your IAM Identity Center instance has been deleted
+
+  * You cannot update your approval team
+
+
+
+
+**To recover teams after IAM Identity Center instance deletion:**
+
+  1. Delete your Multi-party approval identity source by following the instructions in [Disable Multi-party approval](./delete-identity-source.html). Because the IAM Identity Center instance is deleted, you can proceed with identity source deletion even with existing approval teams.
+
+  2. Create a new IAM Identity Center instance. Configure users in this new instance to replace the existing identities in the approval teams that you need to recover.
+
+  3. [Create a new Multi-party approval identity source](./setting-up.html).
+
+  4. Assign new approvers to the affected approval teams using the standard process. Do not include previous approvers.
+
+  5. Follow the troubleshooting steps for the scenario **Recover team with too few active approvers**.
+
+
+
+
+After you create your support ticket, AWS will review the case. If the case is approved, AWS will provide you with information on how to recover the team.
+
@@ -56 +97,3 @@ Before starting the recovery process, check that:
-  2. Create a support ticket:
+  2. Contact AWS Support to initiate the approval team recovery process.
+
+     * Open a ticket using the [AWS Support Center](https://console.aws.amazon.com/support/home#/)
@@ -58 +101 @@ Before starting the recovery process, check that:
-     * Open a ticket [AWS Support Center](https://console.aws.amazon.com/support/home#/)
+     * In the ticket, include the team details you collected
@@ -60 +103 @@ Before starting the recovery process, check that:
-     * Include the team details you collected and label the ticket "Approval Team Recovery"
+     * Label the ticket "Approval Team Recovery" and then submit the ticket.