AWS notifications documentation change
Summary
Updated documentation to clarify that notification configurations can be created in management or Delegated Admin accounts, and that delegated administrators have independent access to configure notifications across organizational units.
Security assessment
The changes are administrative clarifications about account roles and notification distribution within AWS Organizations. There is no evidence of security vulnerabilities, incidents, or security feature additions. The updates focus on functional descriptions of delegated administrator capabilities.
Diff
diff --git a/notifications/latest/userguide/uno-orgs.md b/notifications/latest/userguide/uno-orgs.md index f0ae85c28..084844d0e 100644 --- a//notifications/latest/userguide/uno-orgs.md +++ b//notifications/latest/userguide/uno-orgs.md @@ -38 +38 @@ Trusted access is granted to individual services. You must enable trusted access -You can create notification configurations to filter events across acounts in your organiation. When an event from any member account matches the event rules, User Notifications generates a notification in the management account. +You can create notification configurations in management or Delegated Admin account to filter events across accounts in your organization. When an event from any member account matches the event rules, User Notifications generates a notification in the respective account. @@ -40 +40 @@ You can create notification configurations to filter events across acounts in yo -Configuring notifications for organization accounts creates read-only notification configurations in member accounts. These configurations don't generate notifications in member accounts, only the management account receives organization notifications. For more information, see [Managing notifications across your organization with AWS User Notifications](./managing-org-notifications.html). +Configuring notifications for organization accounts creates read-only notification configurations in member accounts. These configurations don't generate notifications in member accounts, only the management or Delegated Admin account receives organization notifications. For more information, see [Managing notifications across your organization with AWS User Notifications](./managing-org-notifications.html). @@ -97 +97 @@ You can disable trusted access at any time from the User Notifications console. -Delegated administrators share administrator access for User Notifications. They're able to view notifications about member accounts in the organization. You must enable trusted access before registering delegated administrators. You can register up to five delegated administrators. You must also enable AWS managed notifications to allow delegated administrators to view AWS managed notifications. +Delegated administrators have independent administrator access for User Notifications. Each delegated administrator can independently configure their own notification contacts, delivery channels, notification configurations, and can associate with OUs of an organization to receive notifications about the member accounts attached to those OUs. You must enable trusted access before registering delegated administrators. You can register up to five delegated administrators. You must also enable AWS managed notifications to allow delegated administrators to view AWS managed notifications.