AWS inspector documentation change
Summary
Added note clarifying that AWS Organizations policies maintain enforcement after delegated admin removal, though visibility of findings in central console is affected.
Security assessment
The change documents policy enforcement continuity but does not fix a security flaw. It explains operational impacts on security visibility rather than addressing vulnerabilities.
Diff
diff --git a/inspector/latest/user/remove-delegated-admin.md b/inspector/latest/user/remove-delegated-admin.md index 17cd71cef..4901d9419 100644 --- a//inspector/latest/user/remove-delegated-admin.md +++ b//inspector/latest/user/remove-delegated-admin.md @@ -9 +9,7 @@ Remove the Amazon Inspector delegated administrator -You might need to remove the Amazon Inspector delegated administrator account. You can do this from the AWS Organizations management account. When you remove the Amazon Inspector delegated administrator account, Amazon Inspector is still activated in the account and in all of its member accounts. The delegated administrator account and all of its member accounts become standalone accounts and retain their original scan settings. This section describes how to remove the delegated administrator account. +You might need to remove the Amazon Inspector delegated administrator account. You can do this from the AWS Organizations management account. When you remove the Amazon Inspector delegated administrator account, Amazon Inspector is still activated in the account and in all of its member accounts. The delegated administrator account and all of its member accounts become standalone accounts and retain their original scan settings. + +###### Note + +If AWS Organizations policies are managing Amazon Inspector enablement, removing the delegated administrator does not affect policy enforcement. Accounts will remain enabled according to the organization policy settings, though member account findings will no longer be visible in a central delegated administrator console until a new delegated administrator is designated. + +This section describes how to remove the delegated administrator account.