AWS resource-explorer documentation change
Summary
Removed announcement about immediate access feature launch and deleted reference to CloudTrail console visibility timeline.
Security assessment
Removes time-bound feature announcement and CloudTrail implementation detail without indicating any security vulnerability or weakness being addressed.
Diff
diff --git a/resource-explorer/latest/userguide/welcome.md b/resource-explorer/latest/userguide/welcome.md index 35f422400..6e9cba8e4 100644 --- a//resource-explorer/latest/userguide/welcome.md +++ b//resource-explorer/latest/userguide/welcome.md @@ -7,2 +6,0 @@ First-time userFeatures of Resource ExplorerSupported RegionsRelated servicesPri -AWS Resource Explorer now provides immediate access to resource search and discovery capabilities in a Region. With this launch, you no longer need to activate Resource Explorer to discover your resources. [Learn more](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-immediate-resource-discovery-experience.html) - @@ -42 +40 @@ As a first-time user of Resource Explorer, you can start searching for resources -Your search experience is automatically enabled based on your IAM permissions. If you have, at minimum, the permissions in the `[AWSResourceExplorerReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSResourceExplorerReadOnlyAccess.html)` managed policy, you can immediately search in partial results (all tagged resources and supported untagged resources created after the [immediate resource discovery](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-immediate-resource-discovery-experience.html) release). Resource Explorer uses a service-linked channel to receive AWS CloudTrail events on your behalf, and this visibility will be available in the CloudTrail console by end of October 2025 across all supported Regions. For complete resource inventory with automatic updates, you'll also need the `iam:CreateServiceLinkedRole` permission (included in the `[AWSResourceExplorerFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSResourceExplorerFullAccess.html)` managed policy). After the service-linked role is created in your account by any user, subsequent users only need the permissions in the `[AWSResourceExplorerReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSResourceExplorerReadOnlyAccess.html)` managed policy to get complete results on first search in subsequent Regions. +Your search experience is automatically enabled based on your IAM permissions. If you have, at minimum, the permissions in the `[AWSResourceExplorerReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSResourceExplorerReadOnlyAccess.html)` managed policy, you can immediately search in partial results (all tagged resources and supported untagged resources created after the [immediate resource discovery](https://docs.aws.amazon.com/resource-explorer/latest/userguide/manage-immediate-resource-discovery-experience.html) release). Resource Explorer uses a service-linked channel to receive AWS CloudTrail events on your behalf. For complete resource inventory with automatic updates, you'll also need the `iam:CreateServiceLinkedRole` permission (included in the `[AWSResourceExplorerFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSResourceExplorerFullAccess.html)` managed policy). After the service-linked role is created in your account by any user, subsequent users only need the permissions in the `[AWSResourceExplorerReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSResourceExplorerReadOnlyAccess.html)` managed policy to get complete results on first search in subsequent Regions.