AWS quicksuite medium security documentation change
Summary
Clarified IAM Identity Center authentication steps and identity propagation requirements
Security assessment
Specifies critical IAM user email requirements and SCIM propagation, reducing risks of orphaned accounts or access misconfiguration in Slack integrations.
Diff
diff --git a/quicksuite/latest/userguide/slack-extension.md b/quicksuite/latest/userguide/slack-extension.md index c763e8dd7..b6a85b42b 100644 --- a//quicksuite/latest/userguide/slack-extension.md +++ b//quicksuite/latest/userguide/slack-extension.md @@ -63 +63 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 2. Ensure that every user under your Entra ID or Okta provider configuration has an email associated with them. + 2. If you are connecting an external IAM provider to IAM Identity Center, ensure that every user under your IAM provider configuration has an email associated with them. @@ -65 +65 @@ If you configured the authentication to connect to Amazon Quick Suite with IAM I - 3. If using Entra ID, set up SCIM identity propagation between the Microsoft Entra ID instance and IAM Identity Center. For detailed steps, see [Configure SAML and SCIM with Microsoft Entra ID and IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/azure-ad-idp.html). + 3. If you are using Entra ID, set up SCIM identity propagation between the Microsoft Entra ID instance and IAM Identity Center. For detailed steps, see [Configure SAML and SCIM with Microsoft Entra ID and IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/azure-ad-idp.html).