AWS nova high security documentation change
Summary
Replaced detailed AWS account sign-up and root user security steps with a concise section linking to external account management guide
Security assessment
Removed explicit security best practices including root user protection guidance and MFA enforcement steps. This change reduces visibility of critical security controls, potentially weakening account security posture. Severity is high due to removal of concrete root user hardening instructions.
Diff
diff --git a/nova/latest/userguide/getting-started-api.md b/nova/latest/userguide/getting-started-api.md index 6c9b81357..dc5a095d9 100644 --- a//nova/latest/userguide/getting-started-api.md +++ b//nova/latest/userguide/getting-started-api.md @@ -17,28 +17 @@ To get started with the API, you need credentials to grant programmatic access. -If you do not have an AWS account, complete the following steps to create one. - -###### To sign up for an AWS account - - 1. Open [https://portal.aws.amazon.com/billing/signup](https://portal.aws.amazon.com/billing/signup). - - 2. Follow the online instructions. - -Part of the sign-up procedure involves receiving a phone call or text message and entering a verification code on the phone keypad. - -When you sign up for an AWS account, an _AWS account root user_ is created. The root user has access to all AWS services and resources in the account. As a security best practice, assign administrative access to a user, and use only the root user to perform [tasks that require root user access](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#root-user-tasks). - - - - -AWS sends you a confirmation email after the sign-up process is complete. At any time, you can view your current account activity and manage your account by going to [https://aws.amazon.com/](https://aws.amazon.com/) and choosing **My Account**. - -###### Secure your AWS account root user - - 1. Sign in to the [AWS Management Console](https://console.aws.amazon.com/) as the account owner by choosing **Root user** and entering your AWS account email address. On the next page, enter your password. - -For help signing in by using root user, see [Signing in as the root user](https://docs.aws.amazon.com/signin/latest/userguide/console-sign-in-tutorials.html#introduction-to-root-user-sign-in-tutorial) in the _AWS Sign-In User Guide_. - - 2. Turn on multi-factor authentication (MFA) for your root user. - -For instructions, see [Enable a virtual MFA device for your AWS account root user (console)](https://docs.aws.amazon.com/IAM/latest/UserGuide/enable-virt-mfa-for-root.html) in the _IAM User Guide_. - - +### Sign up for an AWS account @@ -45,0 +19 @@ For instructions, see [Enable a virtual MFA device for your AWS account root use +To get started with AWS, you need an AWS account. For information about creating an AWS account, see [Getting started with an AWS account](https://docs.aws.amazon.com//accounts/latest/reference/getting-started.html) in the _AWS Account Management Reference Guide_.