AWS security-ir documentation change
Summary
Refined instructions for creating service-linked roles in Organizations management accounts, including updated CLI commands and console references.
Security assessment
Clarifies security-critical role creation process but shows no evidence of patching vulnerabilities or addressing exploits.
Diff
diff --git a/security-ir/latest/userguide/select-a-membership-account.md b/security-ir/latest/userguide/select-a-membership-account.md index e6026fff3..bba22500d 100644 --- a//security-ir/latest/userguide/select-a-membership-account.md +++ b//security-ir/latest/userguide/select-a-membership-account.md @@ -13 +13 @@ You have two options for selecting your AWS Security Incident Response membershi -**Use the delegated administrator account:** AWS Security Incident Response administrative tasks and case management are located in the delegated administrator account. We recommend using the same delegated administrator you've set for other AWS security and compliance services. Provide the 12-digit delegated administrator account ID and then log in to that account to proceed. +**Use the delegated administrator account:** AWS Security Incident Response administrative tasks and case management are located in the delegated administrator account. We recommend using the same delegated administrator that you set for other AWS security and compliance services. Provide the 12-digit delegated administrator account ID and then log in to that account to proceed. @@ -17 +17 @@ You have two options for selecting your AWS Security Incident Response membershi -When you use a delegated administrator account as part of setup, AWS Security Incident Response can't automatically create the required triage service linked role in your AWS Organizations management account. +When you use a delegated administrator account as part of setup, AWS Security Incident Response can't automatically create the required triage service linked role in your AWS Organizations management account. Complete the following steps to manually create this role in your AWS Organizations management account. @@ -19,3 +19 @@ When you use a delegated administrator account as part of setup, AWS Security In -You can use the IAM to create this role in your AWS Organizations management account - -###### To create a service-linked role (console) +###### Create a service-linked role (console) @@ -25 +23 @@ You can use the IAM to create this role in your AWS Organizations management acc - 2. Access the [AWS CloudShell](https://console.aws.amazon.com/cloudshell/home) window or access the account through CLI in your preferred method. + 2. Access the [AWS CloudShell console](https://console.aws.amazon.com/cloudshell/home) or access the account through the AWS Command Line Interface using your preferred method. @@ -27 +25 @@ You can use the IAM to create this role in your AWS Organizations management acc - 3. Use the CLI command `aws iam create-service-linked-role --aws-service-name "triage.security-ir.amazonaws.com" --no-cli-pager` + 3. Use the CLI command `aws iam create-service-linked-role --aws-service-name "triage.security-ir.amazonaws.com" --no-cli-pager`. @@ -29 +27 @@ You can use the IAM to create this role in your AWS Organizations management acc - 4. (Optional) To verify the command worked you can execute the command `aws iam get-role --role-name AWSServiceRoleForSecurityIncidentResponse_Triage` + 4. (Optional) To verify that the command worked, run the command `aws iam get-role --role-name AWSServiceRoleForSecurityIncidentResponse_Triage`.