AWS vsts documentation change
Summary
Replaced detailed AWS sign-up and IAM user creation instructions with a single reference link to AWS account documentation. Removed security best practices about avoiding root user credentials.
Security assessment
Change simplifies onboarding documentation without addressing any specific vulnerability. Removal of security recommendations doesn't indicate a resolved security issue, but reduces security guidance.
Diff
diff --git a/vsts/latest/userguide/setting-up.md b/vsts/latest/userguide/setting-up.md index 9d81bb517..223cca050 100644 --- a//vsts/latest/userguide/setting-up.md +++ b//vsts/latest/userguide/setting-up.md @@ -7 +7 @@ -Sign up for AWSCreate an IAM user +Sign up for an AWS account @@ -15 +15 @@ To use the AWS Toolkit for Azure DevOps to access AWS, you need an AWS account a - * Sign up for AWS + * Sign up for an AWS account @@ -17 +16,0 @@ To use the AWS Toolkit for Azure DevOps to access AWS, you need an AWS account a - * Create an IAM user @@ -20,0 +20 @@ To use the AWS Toolkit for Azure DevOps to access AWS, you need an AWS account a +## Sign up for an AWS account @@ -22,33 +22 @@ To use the AWS Toolkit for Azure DevOps to access AWS, you need an AWS account a -## Sign up for AWS - -If you do not have an AWS account, complete the following steps to create one. - -###### To sign up for an AWS account - - 1. Open [https://portal.aws.amazon.com/billing/signup](https://portal.aws.amazon.com/billing/signup). - - 2. Follow the online instructions. - -Part of the sign-up procedure involves receiving a phone call or text message and entering a verification code on the phone keypad. - -When you sign up for an AWS account, an _AWS account root user_ is created. The root user has access to all AWS services and resources in the account. As a security best practice, assign administrative access to a user, and use only the root user to perform [tasks that require root user access](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#root-user-tasks). - - - - -## Create an IAM user - -To create an administrator user, choose one of the following options. - -Choose one way to manage your administrator | To | By | You can also ----|---|---|--- -In IAM Identity Center (Recommended) | Use short-term credentials to access AWS.This aligns with the security best practices. For information about best practices, see [Security best practices in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#bp-users-federation-idp) in the _IAM User Guide_. | Following the instructions in [Getting started](https://docs.aws.amazon.com//singlesignon/latest/userguide/getting-started.html) in the _AWS IAM Identity Center User Guide_. | Configure programmatic access by [Configuring the AWS CLI to use AWS IAM Identity Center](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sso.html) in the _AWS Command Line Interface User Guide_. -In IAM (Not recommended) | Use long-term credentials to access AWS. | Following the instructions in [ Create an IAM user for emergency access](https://docs.aws.amazon.com/IAM/latest/UserGuide/getting-started-emergency-iam-user.html) in the _IAM User Guide_. | Configure programmatic access by [Manage access keys for IAM users](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_credentials_access-keys.html) in the _IAM User Guide_. - -**Create an IAM user and download its credentials** - -After you've created an IAM user, copy its credentials. To use the AWS Toolkit for Azure DevOps, you must have a set of valid AWS credentials, which consist of an access key and a secret key. These keys are used to sign programmatic web service requests and enable AWS to verify that the request comes from an authorized source. - -###### Warning - -Do not copy your root account credentials for use with AWS Toolkit for Azure DevOps. +To get started with AWS, you need an AWS account. For information about creating an AWS account, see [Getting started with an AWS account](https://docs.aws.amazon.com//accounts/latest/reference/getting-started.html) in the _AWS Account Management Reference Guide_.