AWS wickr documentation change
Summary
Simplified AWS account setup instructions by replacing detailed signup steps with a link to the AWS Account Management Reference Guide. Removed IAM user creation details and security best practices.
Security assessment
The change removes security best practices like avoiding root user access and using IAM Identity Center for short-term credentials. While this reduces security documentation, there's no evidence of a specific security vulnerability being addressed.
Diff
diff --git a/wickr/latest/adminguide/setting-up.md b/wickr/latest/adminguide/setting-up.md index e2ce7aaa9..e5075f7d1 100644 --- a//wickr/latest/adminguide/setting-up.md +++ b//wickr/latest/adminguide/setting-up.md @@ -7 +7 @@ -Sign up for AWSCreate an IAM userWhat's next +Sign up for an AWS accountWhat's next @@ -13 +13 @@ This guide documents the new AWS Wickr administration console, released on March -If you're a new AWS customer, complete the setup prerequisites that are listed on this page before you start using AWS Wickr. For these setup procedures, you use the AWS Identity and Access Management (IAM) service. For complete information about IAM, see the [IAM User Guide](https://docs.aws.amazon.com/IAM/latest/UserGuide/). +## Sign up for an AWS account @@ -15,40 +15 @@ If you're a new AWS customer, complete the setup prerequisites that are listed o -###### Topics - - * Sign up for AWS - - * Create an IAM user - - * What's next - - - - -## Sign up for AWS - -If you do not have an AWS account, complete the following steps to create one. - -###### To sign up for an AWS account - - 1. Open [https://portal.aws.amazon.com/billing/signup](https://portal.aws.amazon.com/billing/signup). - - 2. Follow the online instructions. - -Part of the sign-up procedure involves receiving a phone call or text message and entering a verification code on the phone keypad. - -When you sign up for an AWS account, an _AWS account root user_ is created. The root user has access to all AWS services and resources in the account. As a security best practice, assign administrative access to a user, and use only the root user to perform [tasks that require root user access](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#root-user-tasks). - - - - -## Create an IAM user - -To create an administrator user, choose one of the following options. - -Choose one way to manage your administrator | To | By | You can also ----|---|---|--- -In IAM Identity Center (Recommended) | Use short-term credentials to access AWS.This aligns with the security best practices. For information about best practices, see [Security best practices in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#bp-users-federation-idp) in the _IAM User Guide_. | Following the instructions in [Getting started](https://docs.aws.amazon.com//singlesignon/latest/userguide/getting-started.html) in the _AWS IAM Identity Center User Guide_. | Configure programmatic access by [Configuring the AWS CLI to use AWS IAM Identity Center](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sso.html) in the _AWS Command Line Interface User Guide_. -In IAM (Not recommended) | Use long-term credentials to access AWS. | Following the instructions in [Creating your first IAM admin user and user group](https://docs.aws.amazon.com//IAM/latest/UserGuide/getting-started_create-admin-group.html) in the _IAM User Guide_. | Configure programmatic access by [Managing access keys for IAM users](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_credentials_access-keys.html) in the _IAM User Guide_. - -###### Note - -You can also assign the `AWSWickrFullAccess` managed policy to grant full administrative permission to the Wickr service. For more information, see [AWS managed policy: AWSWickrFullAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSWickrFullAccess). +To get started with AWS, you need an AWS account. For information about creating an AWS account, see [Getting started with an AWS account](https://docs.aws.amazon.com//accounts/latest/reference/getting-started.html) in the _AWS Account Management Reference Guide_.