AWS lake-formation documentation change
Summary
Updated console sign-in instructions to reference 'user with AdministratorAccess policy' instead of a pre-created administrator user.
Security assessment
Standardizes authentication guidance to use policy-based access control. While this aligns with least-privilege principles, there's no indication it fixes a specific security flaw.
Diff
diff --git a/lake-formation/latest/dg/initial-lf-config.md b/lake-formation/latest/dg/initial-lf-config.md index 073e98ae2..f37deb263 100644 --- a//lake-formation/latest/dg/initial-lf-config.md +++ b//lake-formation/latest/dg/initial-lf-config.md @@ -209 +209 @@ JSON - 5. Open the AWS Lake Formation console at [https://console.aws.amazon.com/lakeformation/](https://console.aws.amazon.com/lakeformation/) and sign in as the administrator user that you created in [](./.html#create-an-admin) or as a user with `AdministratorAccess` user AWS managed policy. + 5. Open the AWS Lake Formation console at [https://console.aws.amazon.com/lakeformation/](https://console.aws.amazon.com/lakeformation/) and sign in as a user with the `AdministratorAccess` AWS managed policy. @@ -244 +244 @@ If you have automation in place that creates databases and tables in the Data Ca - 1. Continue in the Lake Formation console at [https://console.aws.amazon.com/lakeformation/](https://console.aws.amazon.com/lakeformation/). Ensure that you are signed in as the administrator user that you created in [](./.html#create-an-admin) or as a user with the `AdministratorAccess` AWS managed policy. + 1. Continue in the Lake Formation console at [https://console.aws.amazon.com/lakeformation/](https://console.aws.amazon.com/lakeformation/). Ensure that you are signed in as a user with the `AdministratorAccess` AWS managed policy. @@ -275 +275 @@ For more information on creating users or groups, see [IAM identities](https://d - 1. Open the IAM console at [https://console.aws.amazon.com/iam](https://console.aws.amazon.com/iam) and sign in as an administrator user that you created in [](./.html#create-an-admin) or as a user with the `AdministratorAccess` AWS managed policy. + 1. Open the IAM console at [https://console.aws.amazon.com/iam](https://console.aws.amazon.com/iam) and sign in as a user with the `AdministratorAccess` AWS managed policy. @@ -387 +387 @@ The following procedure assumes familiarity with IAM. - 1. Open the IAM console at [https://console.aws.amazon.com/iam](https://console.aws.amazon.com/iam) and sign in as the administrator user that you created in [](./.html#create-an-admin) or as user with the `AdministratorAccess` AWS managed policy. + 1. Open the IAM console at [https://console.aws.amazon.com/iam](https://console.aws.amazon.com/iam) and sign in as a user with the `AdministratorAccess` AWS managed policy.