AWS notifications documentation change
Summary
Updated email examples to include aggregated notifications, added email allow list guidance, and clarified email verification security requirements.
Security assessment
The change adds security documentation by advising organizations to configure email allow lists for @aws.com domain and clarifying authentication requirements for email verification. This helps ensure notification delivery and prevents unauthorized verification, but doesn't address a specific security vulnerability.
Diff
diff --git a/notifications/latest/userguide/manage-delivery-channels.md b/notifications/latest/userguide/manage-delivery-channels.md index 7e5d1701b..91288d344 100644 --- a//notifications/latest/userguide/manage-delivery-channels.md +++ b//notifications/latest/userguide/manage-delivery-channels.md @@ -11 +11 @@ You can add delivery channels for both user-configured notifications and AWS man -Emails you receive from User Notifications are sent from the domain `@aws.com`. The prefix of the emails you receive reflect the AWS service sending the communication. For example, notifications from AWS Health are sent from the email `[email protected]` and Amazon CloudWatch notifications are sent from a `[email protected]` email address. +Emails you receive from User Notifications are sent from the domain `@aws.com`. The prefix of the emails you receive reflect the AWS service sending the communication. For example, notifications from AWS Health are sent from the email `[email protected]`, Amazon CloudWatch notifications are sent from `[email protected]`, and aggregated notifications are sent from `[email protected]`. @@ -13 +13,3 @@ Emails you receive from User Notifications are sent from the domain `@aws.com`. -To find the email prefix for a specific service email, inspect the event through the [Amazon EventBridge sandbox](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-pattern-sandbox.html). For example, events where "source": "aws.ec2" will be sent from `[email protected]`. +To find the email prefix for a specific service email, inspect the event through the [Amazon EventBridge sandbox](https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-event-pattern-sandbox.html). + +If your organization uses an email allow list, add the `@aws.com` domain to ensure you receive all User Notifications emails. @@ -29,0 +32,2 @@ A verification email is sent to newly added email addresses. You can generate an +The recipient must be signed in to the AWS account that added the email address to complete the verification process. The verification link directs to the AWS Management Console. +