AWS security-ir documentation change
Summary
Updated service-linked role documentation to specify automatic creation during console onboarding and manual requirements for API/CLI
Security assessment
The change provides clearer instructions about role creation methods but doesn't address any security vulnerability. Removing outdated notes about delegated accounts improves accuracy without security implications.
Diff
diff --git a/security-ir/latest/userguide/using-service-linked-roles.md b/security-ir/latest/userguide/using-service-linked-roles.md index 6a7b4e50c..9dade3e4d 100644 --- a//security-ir/latest/userguide/using-service-linked-roles.md +++ b//security-ir/latest/userguide/using-service-linked-roles.md @@ -68,4 +67,0 @@ You don't need to manually create a service-linked role. When you onboard to to -###### Note - -If you created a membership using a delegated administrator account, then service-linked roles need to be manually created in AWS Organizations Management accounts. - @@ -106 +102 @@ Attached to this role is the AWS managed policy [AWSSecurityIncidentResponseTria -You don't need to manually create a service-linked role. When you onboard to to AWS Security Incident Response in the AWS Management Console, the AWS CLI, or the AWS API, the service creates the service-linked role for you. +If you [onboard](./deploy-configure.html) to AWS Security Incident Response in the AWS Management Console, Security Incident Response automatically creates the `AWSServiceRoleForSecurityIncidentResponse_Triage` service-linked role in your AWS Organizations management account and in all accounts that are in scope. If you onboarding using the API/CLI, then you must create the role manually. For more information, see [Enable Security Incident Response and configure your incident response team using the API/CLI](./enable-sir-using-cli.html). @@ -108 +104 @@ You don't need to manually create a service-linked role. When you onboard to to -If you delete this service-linked role, and then need to create it again, you can use the same process to recreate the role in your account. When you onboard to the service it creates the service-linked role for you again. +If you delete this service-linked role, and then need to create it again, you can use the API/CLI to recreate the role in your account.