AWS solutions documentation change
Summary
Restructured lease template management documentation with detailed steps for creating/updating/deleting templates. Added sections for budget thresholds, duration thresholds, blueprint integration, and cost report groups.
Security assessment
The changes introduce documentation for budget/duration thresholds with 'freeze lease' actions and approval requirements, which are security controls to prevent cost overruns and enforce access governance. However, there is no evidence this addresses a specific disclosed vulnerability.
Diff
diff --git a/solutions/latest/innovation-sandbox-on-aws/manager-guide.md b/solutions/latest/innovation-sandbox-on-aws/manager-guide.md index 256acc09a..8c821ce93 100644 --- a//solutions/latest/innovation-sandbox-on-aws/manager-guide.md +++ b//solutions/latest/innovation-sandbox-on-aws/manager-guide.md @@ -5 +5 @@ -Creating and managing lease templatesAssigning leases to usersApproving and rejecting leasesChoosing the right budget and duration configurationManaging leasesViewing your lease costsAccessing user accounts for troubleshooting +Creating lease templatesUpdating lease templatesDeleting lease templatesAssigning leases to usersApproving and rejecting leasesChoosing the right budget and duration configurationManaging leasesViewing your lease costsAccessing user accounts for troubleshooting @@ -11 +11 @@ This section describes the various actions a Manager can perform using the web U -## Creating and managing lease templates +## Creating lease templates @@ -13 +13 @@ This section describes the various actions a Manager can perform using the web U -Managers (and Administrators) can create lease templates. A lease template defines a specific configuration that a user can choose when requesting a lease. All of your available lease templates are displayed on the **Lease Templates** page. +Managers (and Administrators) can create lease templates that define specific configurations users can choose when requesting a lease. A lease template includes settings for blueprints, budget limits, duration, and cost reporting. All of your available lease templates are displayed on the **Lease Templates** page. @@ -15 +15 @@ Managers (and Administrators) can create lease templates. A lease template defin -To create a lease template: +To create a lease template, navigate to **Lease Templates** in the web UI and choose **Add new lease template**. This opens a wizard to configure your template. @@ -17 +17 @@ To create a lease template: - 1. In the web UI, from the left, select **Lease Templates**. +###### **Step 1: Basic Details** @@ -19 +19 @@ To create a lease template: - 2. Choose **Add new lease template**. +On the **Basic details** page, configure the template’s name, description, visibility, and approval requirements. @@ -21 +21 @@ To create a lease template: - 3. On the **Add a New Lease Template** page, complete the required fields in the **Basic details** section. + @@ -25 +25 @@ To create a lease template: - 2. _(Optional)_ For the description, specify the intended purpose of the account type. + 2. _(Optional)_ For **Description** , specify the intended purpose of the account type. @@ -27 +27,7 @@ To create a lease template: - 3. For **Template Visibility** , choose between **Public** or **Private** : + 3. For **Requires Approval** , choose whether manager approval is required: + + * **Approval required** (default): Managers must manually approve each lease request. Use this for accounts with high budgets or for experienced users. + + * **No approval required** : Accounts are automatically assigned when requested. Use this for accounts with small budgets, testing, and small workloads. + + 4. For **Visibility** , choose between **Public** or **Private** : @@ -33 +39,18 @@ To create a lease template: - 4. If you would like the account associated with this template require an approval, leave the **Approval required** toggle as default. + 5. Choose **Next**. + + + + +###### **Step 2: Blueprint** + +On the **Blueprint** page, you can associate a blueprint with this lease template to pre-deploy infrastructure when leases are created. + + + + 1. Blueprint selection is enabled by default. To skip blueprint selection, turn off **Enable Blueprint Selection**. + + + + 2. Choose a blueprint from the available options. + + 3. Choose **Next** to continue. @@ -40 +63,3 @@ To create a lease template: -If you are unsure about which approval method to use: +When you approve a lease, the blueprint deploys to the sandbox account. If deployment fails, the lease terminates automatically and the account returns to the pool. + +###### **Step 3: Budget Settings** @@ -42 +67 @@ If you are unsure about which approval method to use: - * For accounts that do not need any manual approval, choose **No approval required**. These can be accounts with a small budget, used for testing and small workloads. If you select this approval method, the account will be automatically assigned to a user when they request this. +On the **Budget** page, configure spending limits and budget thresholds. See Budget thresholds for detailed guidance. @@ -44 +69 @@ If you are unsure about which approval method to use: - * For accounts that requires extra approval to grant access, choose **Approval required**. For example, you want to set accounts to be used by experienced users or have high budgets. If you select this approval method, you will need to manually approve the account when users request this account. + @@ -45,0 +71 @@ If you are unsure about which approval method to use: + 1. Choose whether to set a maximum budget: @@ -46,0 +73 @@ If you are unsure about which approval method to use: + * **Budget limit enabled** : Enter a value in **Maximum Spend** (measured in $USD). @@ -47,0 +75 @@ If you are unsure about which approval method to use: + * **Budget limit disabled** : No spending limit is enforced (not recommended for production use). @@ -49 +77 @@ If you are unsure about which approval method to use: - 1. Choose **Next**. + 2. _(Optional)_ Add additional thresholds to send alerts or freeze the account at different spending levels: @@ -51 +79 @@ If you are unsure about which approval method to use: - 2. On the Budget page, complete the required fields. See Choosing the right budget and duration configuration for more information. + 1. Choose **Add Threshold**. @@ -53 +81 @@ If you are unsure about which approval method to use: - 1. If you select **Set a max budget** , enter a value in **Maximum Budget Amount**. The budget is measured in $USD. This will also automatically create a **threshold** which will invoke the clean-up process on the associated account once the entered budget is matched. + 2. Enter a threshold value in $USD. @@ -55 +83 @@ If you are unsure about which approval method to use: - 2. Add thresholds depending on your use case. To add a threshold, click **Add a threshold**. Enter a value in $USD and select an action to perform when that value is reached. You can choose an action from _Send Alert_ or _Freeze Account_. + 3. Select an action: **Send Alert** (email notification) or **Freeze Lease** (prevents new resource creation). @@ -59 +86,0 @@ If you are unsure about which approval method to use: - 4. On the **Lease Duration** page, complete the required fields. See Choosing the right budget and duration configuration for more information. @@ -61 +87,0 @@ If you are unsure about which approval method to use: - 1. If you select **Set a maximum duration** , enter a value in **Maximum Lease Duration (in hours)**. This determines how long the lease is available for. @@ -63 +88,0 @@ If you are unsure about which approval method to use: - 2. You can optionally set thresholds if a maximum duration is set, to specify what happens as the threshold approaches. To add a threshold, click **Add a threshold**. Enter a value in hours and select an action to be initiated once that value is reached. @@ -65 +90,32 @@ If you are unsure about which approval method to use: - 5. Choose **Next**. +###### **Step 4: Lease Duration** + +On the **Lease Duration** page, configure time limits and duration thresholds. See Duration thresholds for detailed guidance. + + + + 1. Choose whether to set a maximum duration: + + * **Duration limit enabled** : Enter a value in **Maximum Duration (in hours)**. This determines how long the lease remains active. + + * **Duration limit disabled** : Leases do not automatically expire (not recommended for production use). + + 2. _(Optional)_ Add thresholds to send alerts or freeze the account as time remaining decreases: + + 1. Choose **Add a threshold**. + + 2. Enter a threshold value in hours. + + 3. Select an action: **Send Alert** (email notification) or **Freeze Lease** (prevents new resource creation). + + 3. Choose **Next**. + + + + +###### **Step 5: Cost Report Group** + +On the **Cost Report Group** page, optionally assign a cost report group to the lease template for cost attribution and reporting purposes. + + + + 1. Choose whether to set a cost report group: @@ -67 +123 @@ If you are unsure about which approval method to use: - 6. On the **Cost Report Group** page, optionally assign a cost report group to the lease template for cost attribution and reporting purposes. + * **Cost reporting group enabled** : You must select a cost reporting group. @@ -69 +125 @@ If you are unsure about which approval method to use: - 1. If cost report groups have been configured by your administrator, you can select from the available options in the dropdown. + * **Cost reporting group disabled** : No cost reporting group selection required. @@ -71 +127 @@ If you are unsure about which approval method to use: - 2. If the administrator has enabled the `requireCostReportGroup` setting, selecting a cost report group will be mandatory. + 2. If cost report groups have been configured by your administrator, select from the available options in the dropdown. @@ -73 +129,28 @@ If you are unsure about which approval method to use: - 7. Review you settings, and choose **Submit** to create a new lease template. Users can request a lease with this new lease template. + 3. Choose **Next**. + + + + +###### Note + +Cost report groups are used to generate custom cost reports that are delivered to an S3 bucket for detailed cost tracking and chargeback by department, project, or team. If the administrator has enabled the `requireCostReportGroup` setting, selecting a cost report group will be mandatory. + +###### **Step 6: Review and Submit** + +On the **Review and Submit** page, review all your settings before creating the template. + + 1. Review each section of your configuration: + + * Basic Details + + * Blueprint (if configured) + + * Budget Settings + + * Lease Duration + + * Cost Report Group (if configured) + + 2. If you need to make changes, use the wizard navigation to return to a previous step. + + 3. When you’re satisfied with the configuration, choose **Create lease template** to create the lease template. @@ -78 +161,17 @@ If you are unsure about which approval method to use: -###### **Modifying an existing lease template** +###### Note + +The new lease template will be available for users to request leases (if public) or for managers to assign leases (if private). + +## Updating lease templates + +After creating a lease template, you can modify its configuration from the lease template details page. Each section of the template can be edited independently. + + + +To update a lease template: + + 1. On the **Lease Templates** page, select the template name to open the details page. + + 2. The details page displays all configuration sections with their current settings: + + * **Basic Details** : Name, Description, ID, Created By, Visibility (Public/Private), Requires Approval (Yes/No) @@ -80 +179 @@ If you are unsure about which approval method to use: -To modify an existing lease template: + * **Blueprint Details** : Blueprint ID, Blueprint Name (or "No Blueprint" if not configured) @@ -82 +181 @@ To modify an existing lease template: - 1. On the **Lease Templates** page, select the name to open the lease template you want to modify. This allows you to edit the lease template settings. + * **Budget Settings** : Maximum Budget, Budget Thresholds (with alert and freeze actions) @@ -84 +183 @@ To modify an existing lease template: - 2. Update your lease template using the tabs (Basic Details, Budget, Duration), and choose **Update** to update the lease template. + * **Duration Settings** : Maximum Duration, Duration Thresholds (with alert and freeze actions) @@ -85,0 +185 @@ To modify an existing lease template: + * **Cost Report Settings** : Cost Report Group (or "Not assigned" if not configured) @@ -86,0 +187 @@ To modify an existing lease template: + 3. Choose the **Edit** button next to the section you want to modify. @@ -87,0 +189,8 @@ To modify an existing lease template: + 4. Make your changes on the edit page for that section. +