AWS deadline-cloud documentation change
Summary
Restructured user management documentation to emphasize identity source configuration and organizational ownership.
Security assessment
The updates provide clearer guidance on access governance but lack evidence of addressing a security flaw. They document security-related processes (organizational ownership of access) without indicating a vulnerability fix.
Diff
diff --git a/deadline-cloud/latest/userguide/managing-users.md b/deadline-cloud/latest/userguide/managing-users.md index 38c3ef39c..14f80df0f 100644 --- a//deadline-cloud/latest/userguide/managing-users.md +++ b//deadline-cloud/latest/userguide/managing-users.md @@ -9 +9 @@ AWS Deadline Cloud uses AWS IAM Identity Center to manage users and groups. IAM -Deadline Cloud enables IAM Identity Center by default, and it is required to set up and use Deadline Cloud. For more information, see [ Manage your identity source](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-identity-source.html). +Deadline Cloud enables IAM Identity Center by default, and it is required to set up and use Deadline Cloud. An organization owner for your AWS Organizations is responsible for managing the users and groups that have access to your Deadline Cloud monitor. For more information, see [What is AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html). @@ -11,3 +11 @@ Deadline Cloud enables IAM Identity Center by default, and it is required to set -An organization owner for your AWS Organizations is responsible for managing the users and groups that have access to your Deadline Cloud monitor. You can create and manage these users and groups using IAM Identity Center or the Deadline Cloud console. For more information, see [What is AWS Organizations](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html). - -With the Deadline Cloud console, you create and remove users and groups that can manage farms, queues, and fleets. IAM Identity Center users created in the Deadline Cloud console will receive email invitations from IAM Identity Center. After the user accepts the invitation, the user will be able to access their assigned Deadline Cloud monitor. +How you manage users depends on your IAM Identity Center identity source configuration. The identity source defines where IAM Identity Center gets user information. @@ -17 +15,5 @@ With the Deadline Cloud console, you create and remove users and groups that can - * [Manage users and groups for the monitor](./manage-monitor-users_users.html) + * [Understanding your identity source](./understanding-identity-source.html) + + * [Create and manage users with IAM Identity Center directory](./manage-monitor-users_users.html) + + * [Manage users with an external identity provider](./manage-users-external-idp.html) @@ -19 +21 @@ With the Deadline Cloud console, you create and remove users and groups that can - * [Manage users and groups for farms, queues, and fleets](./manage-users-by-farm.html) + * [Assign permissions to users and groups](./manage-users-by-farm.html) @@ -32 +34 @@ Customer-managed fleets -Manage users for your monitor +Understanding your identity source