AWS directoryservice documentation change
Summary
Updated references from 'AWS Directory Service' to 'Directory Service' in MFA documentation
Security assessment
Terminology changes in existing MFA documentation. Security requirements for RADIUS configuration and MFA implementation remain unchanged. No new security features or vulnerabilities addressed.
Diff
diff --git a/directoryservice/latest/admin-guide/ms_ad_mfa.md b/directoryservice/latest/admin-guide/ms_ad_mfa.md index 9e4b5353c..bd382a3d1 100644 --- a//directoryservice/latest/admin-guide/ms_ad_mfa.md +++ b//directoryservice/latest/admin-guide/ms_ad_mfa.md @@ -15 +15 @@ RADIUS is an industry-standard client/server protocol that provides authenticati -You can enable multi-factor authentication for your AWS Managed Microsoft AD directory by performing the following procedure. For more information about how to configure your RADIUS server to work with AWS Directory Service and MFA, see [Multi-factor authentication prerequisites](./ms_ad_getting_started.html#prereq_mfa_ad). +You can enable multi-factor authentication for your AWS Managed Microsoft AD directory by performing the following procedure. For more information about how to configure your RADIUS server to work with Directory Service and MFA, see [Multi-factor authentication prerequisites](./ms_ad_getting_started.html#prereq_mfa_ad). @@ -33 +33 @@ For more information, see[How to enable multi-factor authentication for AWS serv - * For information about how to configure basic user access to Amazon Enterprise applications, AWS Single Sign-On and the AWS Management Console using AWS Directory Service, see [Access to AWS applications and services from your AWS Managed Microsoft AD](./ms_ad_manage_apps_services.html) and [Enabling AWS Management Console access with AWS Managed Microsoft AD credentials](./ms_ad_management_console_access.html). + * For information about how to configure basic user access to Amazon Enterprise applications, AWS Single Sign-On and the AWS Management Console using Directory Service, see [Access to AWS applications and services from your AWS Managed Microsoft AD](./ms_ad_manage_apps_services.html) and [Enabling AWS Management Console access with AWS Managed Microsoft AD credentials](./ms_ad_management_console_access.html). @@ -74 +74 @@ The IP addresses of your RADIUS server endpoints, or the IP address of your RADI -RADIUS MFA is applicable only to authenticate access to the AWS Management Console, or to Amazon Enterprise applications and services such as WorkSpaces, Amazon Quick Suite, or Amazon Chime. Amazon Enterprise applications and services are only supported in the Primary Region if Multi-Region replication is configured for your AWS Managed Microsoft AD. It does not provide MFA to Windows workloads running on EC2 instances, or for signing into an EC2 instance. AWS Directory Service does not support RADIUS Challenge/Response authentication. +RADIUS MFA is applicable only to authenticate access to the AWS Management Console, or to Amazon Enterprise applications and services such as WorkSpaces, Amazon Quick Suite, or Amazon Chime. Amazon Enterprise applications and services are only supported in the Primary Region if Multi-Region replication is configured for your AWS Managed Microsoft AD. It does not provide MFA to Windows workloads running on EC2 instances, or for signing into an EC2 instance. Directory Service does not support RADIUS Challenge/Response authentication. @@ -81 +81 @@ _**Port**_ -The port that your RADIUS server is using for communications. Your on-premises network must allow inbound traffic over the default RADIUS server port (UDP:1812) from the AWS Directory Service servers. +The port that your RADIUS server is using for communications. Your on-premises network must allow inbound traffic over the default RADIUS server port (UDP:1812) from the Directory Service servers.