AWS solutions documentation change
Summary
Removed **TargetAccountIDs** and **TargetAccountIDsStrategy** parameters controlling remediation scope
Security assessment
Removal of account targeting parameters appears to be a feature change, but no explicit security context or vulnerability remediation is mentioned in the diff.
Diff
diff --git a/solutions/latest/automated-security-response-on-aws/deployment.md b/solutions/latest/automated-security-response-on-aws/deployment.md index ed67beea3..ad5949959 100644 --- a//solutions/latest/automated-security-response-on-aws/deployment.md +++ b//solutions/latest/automated-security-response-on-aws/deployment.md @@ -160,0 +161,2 @@ Parameter | Default | Description +**ShouldDeployWebUI** | `yes` | Deploy the Web UI components including API Gateway, Lambda functions, and CloudFront distribution. Select "yes" to enable the web-based dashboard for viewing findings and remediation status. +**AdminUserEmail** | _(Optional input)_ | Email address for the initial admin user. This user will have full administrative access to the ASR Web UI. Required **only** when Web UI is enabled. @@ -166,2 +167,0 @@ Parameter | Default | Description -**TargetAccountIDs** | `ALL` | A list of AWS account IDs to control the scope of automated remediation. Use "ALL" to target all accounts in the organization. Or provide a comma-separated list of 12-digit AWS Account IDs. Example: "123456789012,098765432109" -**TargetAccountIDsStrategy** | `INCLUDE` | Defines how the solution applies automated remediations based on the TargetAccountIDs list. INCLUDE: Run automated remediations only for accounts listed. EXCLUDE: Run automated remediations for all accounts except those listed. @@ -261 +261 @@ Parameter | Default | Description -**EnableCloudTrailForASRActionLog** | `no` | Select `yes` if you want to monitor management events conducted by the solution on the CloudWatch dashboard. The solution creates a CloudTrail trail in each member account where you select `yes`. You must deploy the solution into an AWS Organization to enable this feature. See the [Cost](./cost.html#additional-cost-action-log) section to understand the additional cost that this incurs. +**EnableCloudTrailForASRActionLog** | `no` | Select `yes` if you want to monitor management events conducted by the solution on the CloudWatch dashboard. The solution creates a CloudTrail trail in each member account where you select `yes`. You must deploy the solution into an AWS Organization to enable this feature. **Additionally, you can only enable this feature in a single region within the same account.** See the [Cost](./cost.html#additional-cost-action-log) section to understand the additional cost that this incurs.