AWS wickr documentation change
Summary
Simplified language around federated identity recommendations, removed redundant details about IAM Identity Center configuration options, and made general editorial improvements to conciseness.
Security assessment
Changes are editorial in nature, focusing on clarity and brevity rather than addressing security vulnerabilities or adding new security features. The core security guidance (use federated identities with temporary credentials, prefer IAM Identity Center) remains unchanged.
Diff
diff --git a/wickr/latest/adminguide/security_iam_authentication-federated.md b/wickr/latest/adminguide/security_iam_authentication-federated.md index 5a1b62a96..2bb24deae 100644 --- a//wickr/latest/adminguide/security_iam_authentication-federated.md +++ b//wickr/latest/adminguide/security_iam_authentication-federated.md @@ -9 +9 @@ This guide documents the new AWS Wickr administration console, released on March -As a best practice, require human users, including users that require administrator access, to use federation with an identity provider to access AWS services by using temporary credentials. +As a best practice, require human users to use federation with an identity provider to access AWS services using temporary credentials. @@ -11 +11 @@ As a best practice, require human users, including users that require administra -A _federated identity_ is a user from your enterprise user directory, a web identity provider, the AWS Directory Service, the Identity Center directory, or any user that accesses AWS services by using credentials provided through an identity source. When federated identities access AWS accounts, they assume roles, and the roles provide temporary credentials. +A _federated identity_ is a user from your enterprise directory, web identity provider, or AWS Directory Service that accesses AWS services using credentials from an identity source. Federated identities assume roles that provide temporary credentials. @@ -13 +13 @@ A _federated identity_ is a user from your enterprise user directory, a web iden -For centralized access management, we recommend that you use AWS IAM Identity Center. You can create users and groups in IAM Identity Center, or you can connect and synchronize to a set of users and groups in your own identity source for use across all your AWS accounts and applications. For information about IAM Identity Center, see [What is IAM Identity Center?](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) in the _AWS IAM Identity Center User Guide_. +For centralized access management, we recommend AWS IAM Identity Center. For more information, see [What is IAM Identity Center?](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) in the _AWS IAM Identity Center User Guide_.