AWS amazon-mq documentation change
Summary
Modified admin recovery instructions to reference IAM authentication and updated authentication method labels
Security assessment
Adds recovery method using IAM authentication but lacks evidence of addressing an existing vulnerability
Diff
diff --git a/amazon-mq/latest/developer-guide/rabbitmq-simple-auth-broker-users.md b/amazon-mq/latest/developer-guide/rabbitmq-simple-auth-broker-users.md index 73a8d3e53..1e644e80b 100644 --- a//amazon-mq/latest/developer-guide/rabbitmq-simple-auth-broker-users.md +++ b//amazon-mq/latest/developer-guide/rabbitmq-simple-auth-broker-users.md @@ -38 +38 @@ To create a new user with the RabbitMQ management API, use the following API end - * If you've forgotten the admin password you set while creating the broker, you cannot reset your credentials. If you've created multiple administrators, you can log in using another admin user and reset or recreate your credentials. If you have only one admin user, you must delete the broker and create a new one with new credentials. We recommend consuming or backing up messages before deleting the broker. + * If you lose access to all administrator accounts, see [recovering broker access](./troubleshooting-rabbitmq.html#rabbitmq-broker-recovery) to use IAM authentication for recovery. @@ -66 +66 @@ Authentication and Authorization -LDAP authentication and authorization +OAuth 2.0 authentication and authorization