AWS appstudio high security documentation change
Summary
Removed detailed AWS account creation steps and deleted the entire 'Create an administrative user for managing AWS resources' section. Replaced with a single link to AWS account setup documentation.
Security assessment
Removes critical security guidance about avoiding root user access and creating administrative users. This deletion of security best practices (like not using root accounts) could lead to insecure deployments. Specific evidence: Removal of explicit warnings about root user risks and IAM user creation steps.
Diff
diff --git a/appstudio/latest/userguide/setting-up-first-time-admin.md b/appstudio/latest/userguide/setting-up-first-time-admin.md index ed8dc7f34..065248893 100644 --- a//appstudio/latest/userguide/setting-up-first-time-admin.md +++ b//appstudio/latest/userguide/setting-up-first-time-admin.md @@ -7 +7 @@ -Sign up for an AWS accountCreate an administrative user for managing AWS resourcesCreate an App Studio instance in the AWS Management Console +Sign up for an AWS accountCreate an App Studio instance in the AWS Management Console @@ -13,27 +13 @@ Sign up for an AWS accountCreate an administrative user for managing AWS resourc -An AWS account is required to set up App Studio. Only one AWS account is required to use App Studio—builders and administrators don't need an AWS account to use App Studio because access is managed with AWS IAM Identity Center. - -###### To create an AWS account - - 1. Open [https://portal.aws.amazon.com/billing/signup](https://portal.aws.amazon.com/billing/signup). - - 2. Follow the online instructions. - -Part of the sign-up procedure involves receiving a phone call or text message and entering a verification code on the phone keypad. - -When you sign up for an AWS account, an _AWS account root user_ is created. The root user has access to all AWS services and resources in the account. As a security best practice, assign administrative access to a user, and use only the root user to perform [tasks that require root user access](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#root-user-tasks). - - - - -## Create an administrative user for managing AWS resources - -When you first create an AWS account, you begin with a default set of credentials with complete access to all AWS resources in your account. This identity is called the [AWS account root user](https://docs.aws.amazon.com/IAM/latest/UserGuide/root-user-best-practices.html). For creating AWS roles and resources to be used with App Studio, we strongly recommend that you do not use the AWS account root user. Instead, we recommend that you create and use an administrative user. - -Use the following topics to create an administrative user for managing AWS roles and resources for use with App Studio. - - * For a single, standalone AWS account, see [Create your first IAM user](https://docs.aws.amazon.com//IAM/latest/UserGuide/getting-started-iam-user.html) in the _IAM User Guide_. You can provide any user name, but it must have the `AdministratorAccess` permissions policy. - - * For multiple AWS accounts managed through AWS Organizations, see [Set up AWS account access for an IAM Identity Center administrative user](https://docs.aws.amazon.com/singlesignon/latest/userguide/quick-start-default-idc.html) in the _AWS IAM Identity Center User Guide_. - - - +To get started with AWS, you need an AWS account. For information about creating an AWS account, see [Getting started with an AWS account](https://docs.aws.amazon.com//accounts/latest/reference/getting-started.html) in the _AWS Account Management Reference Guide_.