AWS resource-explorer documentation change
Summary
Updated automatic resource discovery behavior description and removed announcement
Security assessment
Clarifies that only 'supported' untagged resources are included and adds regional rollout details. While this affects visibility of resources, there's no evidence this addresses a security vulnerability or adds security controls. The service-linked role mention maintains existing security context.
Diff
diff --git a/resource-explorer/latest/userguide/manage-immediate-resource-discovery-experience.md b/resource-explorer/latest/userguide/manage-immediate-resource-discovery-experience.md index 9ca994220..10cd78502 100644 --- a//resource-explorer/latest/userguide/manage-immediate-resource-discovery-experience.md +++ b//resource-explorer/latest/userguide/manage-immediate-resource-discovery-experience.md @@ -7,2 +6,0 @@ Immediate resource discovery experiencePermission tiers and user experiencesUnde -AWS Resource Explorer now provides immediate access to resource search and discovery capabilities in a Region. With this launch, you no longer need to activate Resource Explorer to discover your resources. [Learn more](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-immediate-resource-discovery-experience.html) - @@ -36 +34 @@ Resource Explorer provides three distinct user experiences based on your IAM per -**Experience:** Complete resource search results with automatic infrastructure creation. On first search in each Region, Resource Explorer automatically creates the service-linked role and user-owned indexes and views in the Region, providing full search functionality including all tagged and untagged resources with ongoing automatic updates. After the service-linked role is created in your account by any user, subsequent users need only the permissions in the `[AWSResourceExplorerReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSResourceExplorerReadOnlyAccess.html)` managed policy to create an index and view for full results on first search in each Region . +**Experience:** Complete resource search results with automatic infrastructure creation. On first search, Resource Explorer automatically creates the service-linked role and user-owned indexes and views in the Region, providing full search functionality including all tagged and supported untagged resources with ongoing automatic updates. On search in subsequent Regions, Resource Explorer automatically creates user-owned indexes and views per Region. After the service-linked role is created in your account by any user, subsequent users need only the permissions in the `[AWSResourceExplorerReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSResourceExplorerReadOnlyAccess.html)` managed policy to create an index and view for full results on first search in each Region.