AWS notifications documentation change
Summary
Added clarification that email verification requires sign-in to the AWS account that added the email address and directs to AWS Management Console.
Security assessment
This change adds security documentation by clarifying authentication requirements for email verification in organizational contexts, ensuring proper access controls are understood. This helps prevent unauthorized verification but doesn't address a specific security vulnerability.
Diff
diff --git a/notifications/latest/userguide/managing-org-notifications.md b/notifications/latest/userguide/managing-org-notifications.md index f258bf10b..26d759cfb 100644 --- a//notifications/latest/userguide/managing-org-notifications.md +++ b//notifications/latest/userguide/managing-org-notifications.md @@ -109,0 +110,2 @@ A verification email is sent to newly added email addresses once you create the +The recipient must be signed in to the AWS account that added the email address to complete the verification process. The verification link directs to the AWS Management Console. +