AWS notifications documentation change
Summary
Added clarification that email verification requires sign-in to the AWS account that added the email address and directs to AWS Management Console.
Security assessment
This change adds security documentation by clarifying the authentication requirements for email verification, ensuring users understand they must be signed into the correct AWS account. This helps prevent unauthorized verification attempts but doesn't address a specific security vulnerability.
Diff
diff --git a/notifications/latest/userguide/getting-started.md b/notifications/latest/userguide/getting-started.md index b4529dd8f..fb1bf484d 100644 --- a//notifications/latest/userguide/getting-started.md +++ b//notifications/latest/userguide/getting-started.md @@ -88,0 +89,2 @@ A verification email is sent to newly added email addresses once you create the +The recipient must be signed in to the AWS account that added the email address to complete the verification process. The verification link directs to the AWS Management Console. +