AWS amazondynamodb documentation change
Summary
Restructured AWS account setup section by removing detailed signup instructions and deleting the entire 'Granting programmatic access' section. Simplified credential configuration steps.
Security assessment
The changes remove security best practices documentation about root user risks and programmatic access methods (including temporary credential recommendations). While this reduces security guidance visibility, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/amazondynamodb/latest/developerguide/SettingUp.DynamoWebService.md b/amazondynamodb/latest/developerguide/SettingUp.DynamoWebService.md index e556c318c..04891e382 100644 --- a//amazondynamodb/latest/developerguide/SettingUp.DynamoWebService.md +++ b//amazondynamodb/latest/developerguide/SettingUp.DynamoWebService.md @@ -7 +7 @@ -Signing up for AWSGranting programmatic accessConfiguring your credentialsIntegrating with other DynamoDB services +Signing up for AWSConfiguring your credentialsIntegrating with other DynamoDB services @@ -13 +13 @@ To use the Amazon DynamoDB web service: - 1. Sign up for AWS. + 1. Sign up for an AWS account @@ -15 +15 @@ To use the Amazon DynamoDB web service: - 2. Get an AWS access key (used to access DynamoDB programmatically). + 2. Configure your credentials (used to access DynamoDB programmatically). @@ -21,2 +20,0 @@ If you plan to interact with DynamoDB only through the AWS Management Console, y - 3. Configure your credentials (used to access DynamoDB programmatically). - @@ -28,44 +26 @@ If you plan to interact with DynamoDB only through the AWS Management Console, y -To use the DynamoDB service, you must have an AWS account. If you don't already have an account, you are prompted to create one when you sign up. You're not charged for any AWS services that you sign up for unless you use them. - -###### To sign up for AWS - - 1. Open [https://portal.aws.amazon.com/billing/signup](https://portal.aws.amazon.com/billing/signup). - - 2. Follow the online instructions. - -Part of the sign-up procedure involves receiving a phone call or text message and entering a verification code on the phone keypad. - -When you sign up for an AWS account, an _AWS account root user_ is created. The root user has access to all AWS services and resources in the account. As a security best practice, assign administrative access to a user, and use only the root user to perform [tasks that require root user access](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#root-user-tasks). - - - - -## Granting programmatic access - -Before you can access DynamoDB programmatically or through the AWS Command Line Interface (AWS CLI), you must have programmatic access. You don't need programmatic access if you plan to use the DynamoDB console only. - -Users need programmatic access if they want to interact with AWS outside of the AWS Management Console. The way to grant programmatic access depends on the type of user that's accessing AWS. - -To grant users programmatic access, choose one of the following options. - -Which user needs programmatic access? | To | By ----|---|--- -IAM | (Recommended) Use console credentials as temporary credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions for the interface that you want to use. - - * For the AWS CLI, see [Login for AWS local development](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sign-in.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs, see [Login for AWS local development](https://docs.aws.amazon.com//sdkref/latest/guide/access-login.html) in the _AWS SDKs and Tools Reference Guide_. - - -Workforce identity (Users managed in IAM Identity Center) | Use temporary credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions for the interface that you want to use. - - * For the AWS CLI, see [Configuring the AWS CLI to use AWS IAM Identity Center](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sso.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs, tools, and AWS APIs, see [IAM Identity Center authentication](https://docs.aws.amazon.com//sdkref/latest/guide/access-sso.html) in the _AWS SDKs and Tools Reference Guide_. - - -IAM | Use temporary credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions in [Using temporary credentials with AWS resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html) in the _IAM User Guide_. -IAM | (Not recommended)Use long-term credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions for the interface that you want to use. - - * For the AWS CLI, see [Authenticating using IAM user credentials](https://docs.aws.amazon.com//cli/latest/userguide/cli-authentication-user.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs and tools, see [Authenticate using long-term credentials](https://docs.aws.amazon.com//sdkref/latest/guide/access-iam-users.html) in the _AWS SDKs and Tools Reference Guide_. - * For AWS APIs, see [Managing access keys for IAM users](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_credentials_access-keys.html) in the _IAM User Guide_. - +### Sign up for an AWS account @@ -72,0 +28 @@ IAM | (Not recommended)Use long-term credentials to sign programmatic requests t +To get started with AWS, you need an AWS account. For information about creating an AWS account, see [Getting started with an AWS account](https://docs.aws.amazon.com//accounts/latest/reference/getting-started.html) in the _AWS Account Management Reference Guide_.