AWS evs documentation change
Summary
Consolidated account setup steps by replacing 'Sign up for AWS' and 'Create an IAM user' sections with a single 'Sign up for an AWS account' section, removed detailed IAM user creation instructions, and added reference to AWS Account Management Guide.
Security assessment
The change removes explicit instructions for creating IAM users with administrator privileges and shifts focus to account creation. While it references IAM role delegation, there's no evidence this addresses a specific security vulnerability. The modification appears to be a documentation restructuring rather than a security fix.
Diff
diff --git a/evs/latest/userguide/setting-up.md b/evs/latest/userguide/setting-up.md index 939822b44..c42ae9a8f 100644 --- a//evs/latest/userguide/setting-up.md +++ b//evs/latest/userguide/setting-up.md @@ -7 +7 @@ -Sign up for AWSCreate an IAM userCreate an IAM role to delegate Amazon EVS permission to an IAM userSign up for an AWS Business, AWS Enterprise On-Ramp, or AWS Enterprise Support planCheck quotasPlan VPC CIDR sizesCreate a VPC with subnetsConfigure the VPC main route tableConfigure your VPC’s DHCP option setCreate and configure VPC Route Server infrastructureCreate a transit gateway for on-premises connectivityCreate an Amazon EC2 Capacity ReservationSet up the AWS CLICreate an Amazon EC2 key pairPrepare your environment for VMware Cloud Foundation (VCF)Acquire VCF license keysVMware HCX prerequisites +Sign up for an AWS accountCreate an IAM role to delegate Amazon EVS permission to an IAM userSign up for an AWS Business, AWS Enterprise On-Ramp, or AWS Enterprise Support planCheck quotasPlan VPC CIDR sizesCreate a VPC with subnetsConfigure the VPC main route tableConfigure your VPC’s DHCP option setCreate and configure VPC Route Server infrastructureCreate a transit gateway for on-premises connectivityCreate an Amazon EC2 Capacity ReservationSet up the AWS CLICreate an Amazon EC2 key pairPrepare your environment for VMware Cloud Foundation (VCF)Acquire VCF license keysVMware HCX prerequisites @@ -15,3 +15 @@ To use Amazon EVS, you will need to configure other AWS services, as well as set - * Sign up for AWS - - * Create an IAM user + * Sign up for an AWS account @@ -54,53 +52 @@ To use Amazon EVS, you will need to configure other AWS services, as well as set -## Sign up for AWS - -If you don’t have an AWS account, complete the following steps to create one. - - 1. Open https://portal.aws.amazon.com/billing/signup. - - 2. Follow the online instructions. - - - - -## Create an IAM user - - 1. Sign in to the [IAM console](https://console.aws.amazon.com/iam/) as the account owner by choosing **Root user** and entering your AWS account email address. On the next page, enter your password. - -###### Note - -We strongly recommend that you adhere to the best practice of using the `Administrator` IAM user below and securely lock away the root user credentials. Sign in as the root user only to perform a few [account and service management tasks](https://docs.aws.amazon.com/general/latest/gr/aws_tasks-that-require-root.html). - - 2. In the navigation pane, choose **Users** and then choose **Create user**. - - 3. For **User name** , enter `Administrator`. - - 4. Select the check box next to **AWS Management Console access**. Then select **Custom password** , and then enter your new password in the text box. - - 5. (Optional) By default, AWS requires the new user to create a new password when first signing in. You can clear the check box next to **User must create a new password at next sign-in** to allow the new user to reset their password after they sign in. - - 6. Choose **Next: Permissions**. - - 7. Under **Set permissions** , choose **Add user to group**. - - 8. Choose **Create group**. - - 9. In the **Create group** dialog box, for **Group name** enter `Administrators`. - - 10. Choose **Filter policies** , and then select **AWS managed -job function** to filter the table contents. - - 11. In the policy list, select the check box for **AdministratorAccess**. Then choose **Create group**. - -###### Note - -You must activate IAM user and role access to Billing before you can use the `AdministratorAccess` permissions to access the AWS Billing and Cost Management console. To do this, follow the instructions in [step 1 of the tutorial about delegating access to the billing console](https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_billing.html). - - 12. Back in the list of groups, select the check box for your new group. Choose **Refresh** if necessary to see the group in the list. - - 13. Choose **Next: Tags**. - - 14. (Optional) Add metadata to the user by attaching tags as key-value pairs. For more information about using tags in IAM, see [Tagging IAM Entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html) in the _IAM User Guide_. - - 15. Choose **Next: Review** to see the list of group memberships to be added to the new user. When you are ready to proceed, choose **Create user**. - - - +## Sign up for an AWS account @@ -108 +54 @@ You must activate IAM user and role access to Billing before you can use the `Ad -You can use this same process to create more groups and users and to give your users access to your AWS account resources. To learn about using policies that restrict user permissions to specific AWS resources, see [Access Management](https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html) and [Example Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_examples.html). +To get started with AWS, you need an AWS account. For information about creating an AWS account, see [Getting started with an AWS account](https://docs.aws.amazon.com/accounts/latest/reference/getting-started.html) in the _AWS Account Management Reference Guide_.