AWS signin documentation change
Summary
Added dual-stack URL format for IAM Identity Center sign-in and clarified IPv6 support for allowlisting domains
Security assessment
The change introduces new dual-stack endpoint formats but doesn't address any security vulnerability. The allowlisting clarification helps network configuration but doesn't mitigate a specific security threat or introduce security features.
Diff
diff --git a/signin/latest/userguide/iam-id-center-sign-in-tutorial.md b/signin/latest/userguide/iam-id-center-sign-in-tutorial.md index 75d6d010a..df2a31768 100644 --- a//signin/latest/userguide/iam-id-center-sign-in-tutorial.md +++ b//signin/latest/userguide/iam-id-center-sign-in-tutorial.md @@ -32 +32 @@ After you sign in, your AWS access portal session is valid for 8 hours. You are - 1. In your browser window, paste in the sign-in URL that you were provided through email, such as `https://`your_subdomain`.awsapps.com/start`. Then, press **Enter**. + 1. In your browser window, paste in the sign-in URL that you were provided through email, such as `https://`your_subdomain`.awsapps.com/start` or the dual-stack URL format `https://`[IAM Identity Center instance ID]`.portal.`[Region]`.app.aws`. Then, press **Enter**. @@ -73 +73 @@ If you want more information about users in IAM Identity Center, refer to the fo - * If you or your organization implement IP or domain filtering, you may need to allowlist domains to create and use your AWS access portal. For details about allowlisting domains, see [Domains to add to your allow list](./allowlist-domains.html). + * If you or your organization implement IP or domain filtering, you may need to allowlist domains to create and use your AWS access portal. IAM Identity Center supports both IPv4 and dual-stack endpoints. If your network uses IPv6, use the dual-stack endpoint domains. For details about allowlisting domains, see [Domains to add to your allow list](./allowlist-domains.html).