AWS cloud-map medium security documentation change
Summary
Simplified setup instructions by removing detailed sections about programmatic access methods, CLI setup, and PowerShell tools. Consolidated sign-up steps and removed references to access keys.
Security assessment
Removes guidance on secure credential management including temporary credentials and access key security best practices. Deletes warnings about long-term credentials being 'not recommended' which weakens security posture documentation.
Diff
diff --git a/cloud-map/latest/dg/setting-up-cloud-map.md b/cloud-map/latest/dg/setting-up-cloud-map.md index 08cc9b649..a139b5e01 100644 --- a//cloud-map/latest/dg/setting-up-cloud-map.md +++ b//cloud-map/latest/dg/setting-up-cloud-map.md @@ -7 +7 @@ -Sign Up for AWSAccess the API, AWS CLI, AWS Tools for Windows PowerShell, or the AWS SDKsSet Up the AWS Command Line Interface or AWS Tools for Windows PowerShellDownload an AWS SDK +Sign up for an AWS accountDownload an AWS SDK @@ -15,5 +15 @@ The overview and procedures in the following sections are meant to help you get - * Sign Up for AWS - - * Access the API, AWS CLI, AWS Tools for Windows PowerShell, or the AWS SDKs - - * Set Up the AWS Command Line Interface or AWS Tools for Windows PowerShell + * Sign up for an AWS account @@ -26,3 +22 @@ The overview and procedures in the following sections are meant to help you get -## Sign Up for AWS - -### Sign up for an AWS account +## Sign up for an AWS account @@ -32,37 +25,0 @@ To get started with AWS, you need an AWS account. For information about creating -## Access the API, AWS CLI, AWS Tools for Windows PowerShell, or the AWS SDKs - -To use the API, the AWS CLI, AWS Tools for Windows PowerShell, or the AWS SDKs, you must create _access keys_. These keys consist of an access key ID and secret access key, which are used to sign programmatic requests that you make to AWS. - -Users need programmatic access if they want to interact with AWS outside of the AWS Management Console. The way to grant programmatic access depends on the type of user that's accessing AWS. - -To grant users programmatic access, choose one of the following options. - -Which user needs programmatic access? | To | By ----|---|--- -IAM | (Recommended) Use console credentials as temporary credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions for the interface that you want to use. - - * For the AWS CLI, see [Login for AWS local development](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sign-in.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs, see [Login for AWS local development](https://docs.aws.amazon.com//sdkref/latest/guide/access-login.html) in the _AWS SDKs and Tools Reference Guide_. - - -Workforce identity (Users managed in IAM Identity Center) | Use temporary credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions for the interface that you want to use. - - * For the AWS CLI, see [Configuring the AWS CLI to use AWS IAM Identity Center](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sso.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs, tools, and AWS APIs, see [IAM Identity Center authentication](https://docs.aws.amazon.com//sdkref/latest/guide/access-sso.html) in the _AWS SDKs and Tools Reference Guide_. - - -IAM | Use temporary credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions in [Using temporary credentials with AWS resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html) in the _IAM User Guide_. -IAM | (Not recommended)Use long-term credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions for the interface that you want to use. - - * For the AWS CLI, see [Authenticating using IAM user credentials](https://docs.aws.amazon.com//cli/latest/userguide/cli-authentication-user.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs and tools, see [Authenticate using long-term credentials](https://docs.aws.amazon.com//sdkref/latest/guide/access-iam-users.html) in the _AWS SDKs and Tools Reference Guide_. - * For AWS APIs, see [Managing access keys for IAM users](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_credentials_access-keys.html) in the _IAM User Guide_. - - - -## Set Up the AWS Command Line Interface or AWS Tools for Windows PowerShell - -The AWS Command Line Interface (AWS CLI) is a unified tool for managing AWS services. For information about how to install and configure the AWS CLI, see [Installing or updating to the latest version of the AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) in the _AWS Command Line Interface User Guide_. - -If you have experience with Windows PowerShell, you might prefer to use AWS Tools for Windows PowerShell. For more information, see [Setting up the AWS Tools for Windows PowerShell](https://docs.aws.amazon.com/powershell/latest/userguide/pstools-getting-set-up.html) in the _AWS Tools for PowerShell User Guide_. -