AWS devopsagent documentation change
Summary
Updated terminology from 'tab' to 'page' for Incident Prevention and Topology sections, expanded Topology description, and added documentation for External Identity Provider (IdP) authentication as a new authentication method.
Security assessment
The change adds documentation for a new security feature (External IdP authentication) which enhances authentication options by allowing OIDC-compatible identity providers. This improves security by enabling integration with corporate credentials without IAM Identity Center. However, there is no evidence of a specific security vulnerability being addressed; it's a feature addition.
Diff
diff --git a/devopsagent/latest/userguide/about-aws-devops-agent-what-is-a-devops-agent-web-app.md b/devopsagent/latest/userguide/about-aws-devops-agent-what-is-a-devops-agent-web-app.md index e8b3fc312..9bd68c2ca 100644 --- a//devopsagent/latest/userguide/about-aws-devops-agent-what-is-a-devops-agent-web-app.md +++ b//devopsagent/latest/userguide/about-aws-devops-agent-what-is-a-devops-agent-web-app.md @@ -28 +28 @@ The DevOps Agent web app provides the following primary capabilities: - * **Incident Prevention –** Found in the Prevention tab, this is where you will find recommendations to improve your observability posture, delivery processes, and infrastructure architecture to prevent future incidents. + * **Incident Prevention –** Found in the Prevention page, this is where you will find recommendations to improve your observability posture, delivery processes, and infrastructure architecture to prevent future incidents. @@ -30 +30 @@ The DevOps Agent web app provides the following primary capabilities: - * **DevOps Center –** The DevOps Center tab provides an interactive visual representation of the account resources and their relationships across all of the resources in the connected accounts. You can view the topology with different levels of detail. + * **Topology –** The Topology page provides an interactive visual representation of the account resources and their relationships across all of the resources in the connected accounts. You can view the topology with different levels of detail using the "Show" dropdown to switch between System, Container, and Resource views. @@ -45 +45,3 @@ AWS DevOps Agent supports flexible authentication methods to accommodate differe - * **IAM authentication link (Admin access)** – An alternative method provides direct access to the web app from the AWS Management Console using your existing console session. This option is useful This option is useful before implementing full Identity Center integration, but sessions are limited to 10 minutes. + * **External identity provider (IdP) authentication** – Organizations can connect an OIDC-compatible identity provider, such as Okta or Microsoft Entra ID, directly to the Agent Space web app without requiring IAM Identity Center. Users sign in with their corporate credentials through the IdP. For setup instructions, see [Setting Up External Identity Provider (IdP) Authentication](./aws-devops-agent-security-setting-up-external-identity-provider-idp-authentication.html). + + * **IAM authentication link (Admin access)** – An alternative method provides direct access to the web app from the AWS Management Console using your existing console session. This option is useful before implementing full Identity Center integration, but sessions are limited to 10 minutes.