AWS securityagent documentation change
Summary
Added new section 'Bypass domain ownership verification' allowing penetration testers to request manual verification via support case
Security assessment
Adds documentation for a security testing feature that allows authorized penetration testers to bypass domain ownership verification through a manual process. This documents a security-related workflow but doesn't address a specific vulnerability.
Diff
diff --git a/securityagent/latest/userguide/enable-test-domain.md b/securityagent/latest/userguide/enable-test-domain.md index e32bacf4e..30eac9888 100644 --- a//securityagent/latest/userguide/enable-test-domain.md +++ b//securityagent/latest/userguide/enable-test-domain.md @@ -5 +5 @@ -Step 1: Add a target domainStep 2: Verify domain ownership +Step 1: Add a target domainStep 2: Verify domain ownershipBypass domain ownership verification @@ -84,0 +85,4 @@ If your domain is registered in multiple agent spaces and you are using HTTP rou +## Bypass domain ownership verification + +Customers who have authorization to perform penetration testing on an endpoint but cannot complete ownership verification can request manual verification from us. Please open a customer support case to make this request. Your request must include your business use case and your justification for manual ownership verification (i.e., why you are authorized to perform penetration testing on the endpoint). +