AWS cli documentation change
Summary
Updated AWS CLI version reference and added CloudTrail logging documentation for handshake acceptance events
Security assessment
Added details about CloudTrail logging of AccountJoinedOrganization/AccountDepartedOrganization events which improves audit capabilities. No security vulnerability is addressed.
Diff
diff --git a/cli/latest/reference/organizations/accept-handshake.md b/cli/latest/reference/organizations/accept-handshake.md index 144b819b3..b4b67b289 100644 --- a//cli/latest/reference/organizations/accept-handshake.md +++ b//cli/latest/reference/organizations/accept-handshake.md @@ -15 +15 @@ - * [AWS CLI 2.34.53 Command Reference](../../index.html) » + * [AWS CLI 2.34.55 Command Reference](../../index.html) » @@ -79,0 +80,2 @@ For more information, see [Responding to invitations](https://docs.aws.amazon.co +When a handshake is accepted, Organizations logs membership events in CloudTrail, available only in the management account’s event history. If the account was standalone and joined a new organization, an `AccountJoinedOrganization` event is logged with `joinedMethod:Invited` and `joinedTime` fields. If the account departed one organization and joined another, both an `AccountDepartedOrganization` event with `departedMethod:Left` and `departedTime` and an `AccountJoinedOrganization` event with `joinedMethod:Invited` and `joinedTime` are logged in their respective management accounts. + @@ -517 +519 @@ Handshake -> (structure) - * [AWS CLI 2.34.53 Command Reference](../../index.html) » + * [AWS CLI 2.34.55 Command Reference](../../index.html) »