AWS controltower documentation change
Summary
Added clarification that if IAM Identity Center is in us-east-1, AWS Control Tower uses it regardless of home Region selection.
Security assessment
This is a documentation clarification about Region behavior for IAM Identity Center integration. While IAM Identity Center is a security service, this change doesn't address any security vulnerability or add security feature documentation.
Diff
diff --git a/controltower/latest/userguide/getting-started-prereqs.md b/controltower/latest/userguide/getting-started-prereqs.md index ede6cf2fe..b03adc340 100644 --- a//controltower/latest/userguide/getting-started-prereqs.md +++ b//controltower/latest/userguide/getting-started-prereqs.md @@ -44 +44 @@ By default, all accounts are subscribed to these services. - * If AWS IAM Identity Center (IAM Identity Center) is already set up, the AWS Control Tower home Region must be the same as the IAM Identity Center Region. + * If AWS IAM Identity Center (IAM Identity Center) is already set up, the AWS Control Tower home Region must be the same as the IAM Identity Center Region. However, if IAM Identity Center is set up in the US East (N. Virginia) Region (us-east-1), AWS Control Tower uses that instance regardless of the home Region you select.