AWS AmazonElastiCache medium security documentation change
Summary
Removed 'Grant programmatic access' step and deleted entire section explaining programmatic access methods
Security assessment
The removal of programmatic access guidance eliminates documentation about secure credential management practices. This could impact security by obscuring best practices for temporary credentials (more secure) versus long-term credentials (less secure), potentially leading to insecure implementations.
Diff
diff --git a/AmazonElastiCache/latest/dg/set-up.md b/AmazonElastiCache/latest/dg/set-up.md index 6e77457d2..c2534a2e0 100644 --- a//AmazonElastiCache/latest/dg/set-up.md +++ b//AmazonElastiCache/latest/dg/set-up.md @@ -7 +7 @@ -Sign up for an AWS accountCreate a user with administrative accessGrant programmatic accessSet up permissionsSet up EC2Grant network accessSet up command line access +Sign up for an AWS accountCreate a user with administrative accessSet up permissionsSet up EC2Grant network accessSet up command line access @@ -19,2 +18,0 @@ To use the ElastiCache web service, follow these steps. - * Grant programmatic access - @@ -103,38 +100,0 @@ For instructions, see [ Add groups](https://docs.aws.amazon.com//singlesignon/la -## Grant programmatic access - -Users need programmatic access if they want to interact with AWS outside of the AWS Management Console. The way to grant programmatic access depends on the type of user that's accessing AWS. - -To grant users programmatic access, choose one of the following options. - -Which user needs programmatic access? | To | By ----|---|--- -IAM | (Recommended) Use console credentials as temporary credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions for the interface that you want to use. - - * For the AWS CLI, see [Login for AWS local development](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sign-in.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs, see [Login for AWS local development](https://docs.aws.amazon.com//sdkref/latest/guide/access-login.html) in the _AWS SDKs and Tools Reference Guide_. - - -Workforce identity (Users managed in IAM Identity Center) | Use temporary credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions for the interface that you want to use. - - * For the AWS CLI, see [Configuring the AWS CLI to use AWS IAM Identity Center](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sso.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs, tools, and AWS APIs, see [IAM Identity Center authentication](https://docs.aws.amazon.com//sdkref/latest/guide/access-sso.html) in the _AWS SDKs and Tools Reference Guide_. - - -IAM | Use temporary credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions in [Using temporary credentials with AWS resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html) in the _IAM User Guide_. -IAM | (Not recommended)Use long-term credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions for the interface that you want to use. - - * For the AWS CLI, see [Authenticating using IAM user credentials](https://docs.aws.amazon.com//cli/latest/userguide/cli-authentication-user.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs and tools, see [Authenticate using long-term credentials](https://docs.aws.amazon.com//sdkref/latest/guide/access-iam-users.html) in the _AWS SDKs and Tools Reference Guide_. - * For AWS APIs, see [Managing access keys for IAM users](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_credentials_access-keys.html) in the _IAM User Guide_. - - - -###### Related topics: - - * [What is IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html) in the _IAM User Guide_. - - * [AWS Security Credentials](https://docs.aws.amazon.com/general/latest/gr/aws-security-credentials.html) in _AWS General Reference_. - - - -