AWS govcloud-us documentation change
Summary
Corrected URL patterns, ARN formats, and domain specifications for IAM Identity Center in GovCloud regions. Fixed email address formatting and wildcard domain syntax.
Security assessment
Changes improve documentation accuracy for SSO configuration elements but don't address specific security vulnerabilities. The wildcard syntax fixes (e.g., `\*.sso.amazonaws.com`) help prevent potential misconfigurations but don't represent new security features or address known exploits.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-sso.md b/govcloud-us/latest/UserGuide/govcloud-sso.md index b5122a2d5..d114df74f 100644 --- a//govcloud-us/latest/UserGuide/govcloud-sso.md +++ b//govcloud-us/latest/UserGuide/govcloud-sso.md @@ -13 +13 @@ IAM Identity Center is the AWS solution for connecting your workforce users to a -The following list details the differences for using this service in the AWS GovCloud (US) Region compared to other AWS Regions: +The following list details the differences for using this service in the AWS GovCloud (US) Regions compared to other AWS Regions: @@ -19 +19 @@ The following list details the differences for using this service in the AWS Gov - * The AWS access portal URL has an AWS GovCloud (US) URL pattern of `https://start.us-gov-home.awsapps.com/directory/`<IdentityStoreId>`` or `https://start.us-gov-home.awsapps.com/directory/`<CustomAlias>`` + * The AWS access portal URL has an AWS GovCloud (US) URL pattern of ` [https://start.us-gov-home.awsapps.com/directory/IdentityStoreId](https://start.us-gov-home.awsapps.com/directory/IdentityStoreId) ` or ` [https://start.us-gov-home.awsapps.com/directory/CustomAlias](https://start.us-gov-home.awsapps.com/directory/CustomAlias) ` @@ -23 +23 @@ You can find this URL on the **Settings** page in the IAM Identity Center consol - * The Amazon Resource Number (ARN) for your IAM Identity Center instance has an AWS GovCloud (US) pattern of `arn:aws-us-gov:sso:::instance/`<SSOInstanceId>`` + * The Amazon Resource Number (ARN) for your IAM Identity Center instance has an AWS GovCloud (US) pattern of `arn:aws-us-gov:sso:::instance/<SSOInstanceId>` @@ -27 +27 @@ You can find this ARN on the **Settings** page in the IAM Identity Center consol - * The ARNs for IAM Identity Center permission sets has an AWS GovCloud (US) pattern of `arn:aws-us-gov:sso:::permissionSet/`<SSOInstanceID>/<PermissionSetID>`` + * The ARNs for IAM Identity Center permission sets has an AWS GovCloud (US) pattern of `arn:aws-us-gov:sso:::permissionSet/<SSOInstanceID>/<PermissionSetID>` @@ -33 +33 @@ You can find these ARNs on the **Permission sets** tab under the **AWS accounts* -The email address `no-reply@`<identitystore_id>`.us-gov-home.awsapps.com` is used for sending forgotten password emails. +The email address `no-reply@<identitystore_id>.us-gov-home.awsapps.com` is used for sending forgotten password emails. @@ -39 +39 @@ The email address `no-reply@`<identitystore_id>`.us-gov-home.awsapps.com` is use - * `start.`[Region]`.us-gov-home.awsapps.com` + * `start.[Region].us-gov-home.awsapps.com` @@ -41 +41 @@ The email address `no-reply@`<identitystore_id>`.us-gov-home.awsapps.com` is use - * `oidc.`[Region]`.amazonaws.com` + * `oidc.[Region].amazonaws.com` @@ -43 +43 @@ The email address `no-reply@`<identitystore_id>`.us-gov-home.awsapps.com` is use - * `*.sso.amazonaws.com` + * `\\*.sso.amazonaws.com` @@ -45 +45 @@ The email address `no-reply@`<identitystore_id>`.us-gov-home.awsapps.com` is use - * `*.sso.`[Region]`.amazonaws.com` + * `\\*.sso.[Region].amazonaws.com` @@ -47 +47 @@ The email address `no-reply@`<identitystore_id>`.us-gov-home.awsapps.com` is use - * `*.sso-portal.`[Region]`.amazonaws.com` + * `\\*.sso-portal.[Region].amazonaws.com` @@ -57 +57 @@ The email address `no-reply@`<identitystore_id>`.us-gov-home.awsapps.com` is use - * ``[Region]`.signin-fips.amazonaws-us-gov.com` + * `[Region].signin-fips.amazonaws-us-gov.com` @@ -59 +59 @@ The email address `no-reply@`<identitystore_id>`.us-gov-home.awsapps.com` is use - * `*.cloudfront.net` + * `\\*.cloudfront.net`