AWS network-manager documentation change
Summary
Updated references to 'AWS CloudFormation StackSets' to 'CloudFormation StackSets' throughout the document for terminology consistency
Security assessment
Changes are purely terminological (removing redundant 'AWS' prefix from CloudFormation references) without altering security controls or permissions. No evidence of addressing vulnerabilities or modifying security configurations.
Diff
diff --git a/network-manager/latest/tgwnm/nm-multi-account.md b/network-manager/latest/tgwnm/nm-multi-account.md index 4b4edf6bd..7c2ceebba 100644 --- a//network-manager/latest/tgwnm/nm-multi-account.md +++ b//network-manager/latest/tgwnm/nm-multi-account.md @@ -43 +43 @@ With multi-account support, you can create a single global network for any of yo -Trusted access creates `AWSServiceAccess` for global networks and AWS CloudFormation StackSets with AWS Organizations. Enabling trusted access provides required permissions for AWS Organizations to deploy service-linked roles (SLRs) to all member accounts within your organization. +Trusted access creates `AWSServiceAccess` for global networks and CloudFormation StackSets with AWS Organizations. Enabling trusted access provides required permissions for AWS Organizations to deploy service-linked roles (SLRs) to all member accounts within your organization. @@ -58 +58 @@ The global networks console manages all of this when calling the Network Manager -When you enable trusted access, the following roles are deployed in your organization using AWS CloudFormation StackSets and AWS Identity and Access Management (IAM) services: +When you enable trusted access, the following roles are deployed in your organization using CloudFormation StackSets and AWS Identity and Access Management (IAM) services: @@ -62 +62 @@ When you enable trusted access, the following roles are deployed in your organiz - * The AWS CloudFormation StackSets member SLR (`AWSServiceRoleForCloudFormationStackSetsOrgMember`) to all member accounts + * The CloudFormation StackSets member SLR (`AWSServiceRoleForCloudFormationStackSetsOrgMember`) to all member accounts @@ -66 +66 @@ When you enable trusted access, the following roles are deployed in your organiz - * The AWS CloudFormation StackSets admin (`AWSServiceRoleForCloudFormationStackSetsOrgAdmin`) SLR to the management account + * The CloudFormation StackSets admin (`AWSServiceRoleForCloudFormationStackSetsOrgAdmin`) SLR to the management account @@ -85 +85 @@ Disabling trusted access through the global networks console removes `AWSService - * Disabling trusted access through the global networks console won't remove `AWSServiceAccess` for AWS CloudFormation StackSets with AWS Organizations. You can manually remove the service access for AWS CloudFormation StackSets by using the AWS CloudFormation StackSet console or by using the Organizations API/CLI. For more information on disabling trusted access for AWS CloudFormation StackSets, see [Disable trusted access with AWS CloudFormation StackSets](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudformation.html#integrate-disable-ta-cloudformation) in the _AWS Organizations User Guide_. + * Disabling trusted access through the global networks console won't remove `AWSServiceAccess` for CloudFormation StackSets with AWS Organizations. You can manually remove the service access for CloudFormation StackSets by using the CloudFormation StackSet console or by using the Organizations API/CLI. For more information on disabling trusted access for CloudFormation StackSets, see [Disable trusted access with AWS CloudFormation StackSets](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-cloudformation.html#integrate-disable-ta-cloudformation) in the _AWS Organizations User Guide_. @@ -113 +113 @@ Using your AWS Organizations management account to manage your global network in -After it's registered, a delegated administrator has the same permissions as the management account. A delegated administrator for the Network Manager service can leverage the SLRs in the member accounts that were deployed when trusted access was enabled and can view transit gateways from other member accounts and can register them to your global network. This allows transit gateways and associated resources to appear in your global network topology. In addition AWS CloudFormation StackSets is updated to include the delegated administrator accounts in the trusted relationship of the deployed IAM roles in the member accounts. +After it's registered, a delegated administrator has the same permissions as the management account. A delegated administrator for the Network Manager service can leverage the SLRs in the member accounts that were deployed when trusted access was enabled and can view transit gateways from other member accounts and can register them to your global network. This allows transit gateways and associated resources to appear in your global network topology. In addition CloudFormation StackSets is updated to include the delegated administrator accounts in the trusted relationship of the deployed IAM roles in the member accounts. @@ -127 +127 @@ After it's deregistered, the delegated administrator no longer has the same perm - * AWS CloudFormation StackSets are updated with the removal of the delegated administrator account. That account is no longer able to assume any IAM roles deployed in other member accounts. + * CloudFormation StackSets are updated with the removal of the delegated administrator account. That account is no longer able to assume any IAM roles deployed in other member accounts.