AWS controltower documentation change
Summary
Updated language about IAM Identity Center opt-out/disablement and clarified SSO user parameter behavior.
Security assessment
This is a minor documentation clarification about parameter usage when IAM Identity Center is disabled. No security issues or security features are mentioned.
Diff
diff --git a/controltower/latest/userguide/update-provisioned-product.md b/controltower/latest/userguide/update-provisioned-product.md index 0eee67cf3..45891ee32 100644 --- a//controltower/latest/userguide/update-provisioned-product.md +++ b//controltower/latest/userguide/update-provisioned-product.md @@ -13 +13 @@ The following procedure guides you through how to update your account in Account -If you have opted out of IAM Identity Center in your landing zone settings, values you provide during account provisioning with the AWS Service Catalog APIs or console are not used. +If you have disabled IAM Identity Center in your landing zone settings, the SSO user parameters (`SSOUserEmail`, `SSOUserFirstName`, and `SSOUserLastName`) are not used during account provisioning. If desired, you can provide placeholder values for these required parameters and modify them later by following the instructions in this section.