AWS AWSCloudFormation documentation change
Summary
Standardized CloudFormation naming convention and updated account creation/deletion policy documentation
Security assessment
Changes focus on terminology consistency and operational guidance. While mentioning IAM access to billing, this is existing documentation rather than new security content.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-organizations-account.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-organizations-account.md index b36b54f66..0631e11b2 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-organizations-account.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-organizations-account.md @@ -5 +5 @@ SyntaxPropertiesReturn valuesSee also -This is the new _AWS CloudFormation Template Reference Guide_. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html). +This is the new _CloudFormation Template Reference Guide_. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html). @@ -11 +11 @@ Creates an AWS account that is automatically a member of the organization whose -AWS CloudFormation uses the [`CreateAccount`](https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreateAccount.html) operation to create accounts. This is an asynchronous request that AWS performs in the background. Because `CreateAccount` operates asynchronously, it can return a successful completion message even though account initialization might still be in progress. You might need to wait a few minutes before you can successfully access the account. To check the status of the request, do one of the following: +CloudFormation uses the [`CreateAccount`](https://docs.aws.amazon.com/organizations/latest/APIReference/API_CreateAccount.html) operation to create accounts. This is an asynchronous request that AWS performs in the background. Because `CreateAccount` operates asynchronously, it can return a successful completion message even though account initialization might still be in progress. You might need to wait a few minutes before you can successfully access the account. To check the status of the request, do one of the following: @@ -32 +32 @@ This operation can be called only from the organization's management account. -The default `DeletionPolicy` for resource `AWS::Organizations::Account` is `Retain`. For more information about how AWS CloudFormation deletes resources, see [ DeletionPolicy Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html). +The default `DeletionPolicy` for resource `AWS::Organizations::Account` is `Retain`. For more information about how CloudFormation deletes resources, see [ DeletionPolicy Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-deletionpolicy.html). @@ -38 +38 @@ The default `DeletionPolicy` for resource `AWS::Organizations::Account` is `Reta - * You can't modify the following list of `Account` resource parameters using AWS CloudFormation updates. + * You can't modify the following list of `Account` resource parameters using CloudFormation updates. @@ -50 +50 @@ If you attempt to update the listed parameters, CloudFormation will attempt the - * When you create an account in an organization using AWS CloudFormation, you can't specify a value for the `CreateAccount` operation parameter `IamUserAccessToBilling`. The default value for parameter `IamUserAccessToBilling` is `ALLOW`, and IAM users and roles with the required permissions can access billing information for the new account. + * When you create an account in an organization using CloudFormation, you can't specify a value for the `CreateAccount` operation parameter `IamUserAccessToBilling`. The default value for parameter `IamUserAccessToBilling` is `ALLOW`, and IAM users and roles with the required permissions can access billing information for the new account. @@ -52 +52 @@ If you attempt to update the listed parameters, CloudFormation will attempt the - * If you get an exception that indicates `DescribeCreateAccountStatus returns IN_PROGRESS state before time out`. You must check the account creation status using the [`DescribeCreateAccountStatus`](https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeCreateAccountStatus.html) operation. If the account state returns as `SUCCEEDED`, you can import the account into AWS CloudFormation management using [`resource import`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import.html). + * If you get an exception that indicates `DescribeCreateAccountStatus returns IN_PROGRESS state before time out`. You must check the account creation status using the [`DescribeCreateAccountStatus`](https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeCreateAccountStatus.html) operation. If the account state returns as `SUCCEEDED`, you can import the account into CloudFormation management using [`resource import`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import.html). @@ -65 +65 @@ If you attempt to update the listed parameters, CloudFormation will attempt the -To declare this entity in your AWS CloudFormation template, use the following syntax: +To declare this entity in your CloudFormation template, use the following syntax: