AWS kinesis-agent-windows documentation change
Summary
Simplified AWS account setup instructions by replacing detailed sign-up steps with a link to account management documentation.
Security assessment
The change removes security best practices about root user access and IAM administrator setup. While this reduces security guidance visibility, there's no evidence it addresses a specific vulnerability.
Diff
diff --git a/kinesis-agent-windows/latest/userguide/getting-started.md b/kinesis-agent-windows/latest/userguide/getting-started.md index ce41e2b89..aa27d9cc3 100644 --- a//kinesis-agent-windows/latest/userguide/getting-started.md +++ b//kinesis-agent-windows/latest/userguide/getting-started.md @@ -32 +32 @@ Before installing Kinesis Agent for Windows, ensure that you have the following - * An AWS account for using the various AWS services related to your data pipeline. For information about creating and configuring an AWS account, see Setting Up an AWS account. + * An AWS account for using the various AWS services related to your data pipeline. For information about creating and configuring an AWS account, see Sign up for an AWS account. @@ -54,53 +54 @@ To determine the latest version of the .NET Framework that is installed on a des -If you do not have an AWS account, complete the following steps to create one. - -###### To sign up for an AWS account - - 1. Open [https://portal.aws.amazon.com/billing/signup](https://portal.aws.amazon.com/billing/signup). - - 2. Follow the online instructions. - -Part of the sign-up procedure involves receiving a phone call or text message and entering a verification code on the phone keypad. - -When you sign up for an AWS account, an _AWS account root user_ is created. The root user has access to all AWS services and resources in the account. As a security best practice, assign administrative access to a user, and use only the root user to perform [tasks that require root user access](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#root-user-tasks). - - - - -To create an administrator user, choose one of the following options. - -Choose one way to manage your administrator | To | By | You can also ----|---|---|--- -In IAM Identity Center (Recommended) | Use short-term credentials to access AWS.This aligns with the security best practices. For information about best practices, see [Security best practices in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#bp-users-federation-idp) in the _IAM User Guide_. | Following the instructions in [Getting started](https://docs.aws.amazon.com//singlesignon/latest/userguide/getting-started.html) in the _AWS IAM Identity Center User Guide_. | Configure programmatic access by [Configuring the AWS CLI to use AWS IAM Identity Center](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sso.html) in the _AWS Command Line Interface User Guide_. -In IAM (Not recommended) | Use long-term credentials to access AWS. | Following the instructions in [ Create an IAM user for emergency access](https://docs.aws.amazon.com/IAM/latest/UserGuide/getting-started-emergency-iam-user.html) in the _IAM User Guide_. | Configure programmatic access by [Manage access keys for IAM users](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_credentials_access-keys.html) in the _IAM User Guide_. - -###### To sign up for AWS and create an administrator account - - 1. If you don't have an AWS account, open [https://aws.amazon.com/](https://aws.amazon.com/). Choose **Create an AWS account** , and then follow the online instructions. - -Part of the sign-up procedure involves receiving a phone call and entering a PIN using the phone keypad. - - 2. Sign in to the AWS Management Console and open the IAM console at [https://console.aws.amazon.com/iam/](https://console.aws.amazon.com/iam/). - - 3. In the navigation pane, choose **Groups** , and then choose **Create New Group**. - - 4. For **Group Name** , enter a name for your group, such as `Administrators`, and then choose **Next Step**. - - 5. In the list of policies, select the check box next to the **AdministratorAccess** policy. You can use the **Filter** menu and the **Search** box to filter the list of policies. - - 6. Choose **Next Step**. Choose **Create Group** , and your new group appears under **Group Name**. - - 7. In the navigation pane, choose **Users** , and then choose **Create New Users**. - - 8. In box **1** , enter a user name, clear the check box next to **Generate an access key for each user** , and then choose **Create**. - - 9. In the list of users, choose the name (not the check box) of the user that you just created. You can use the **Search** box to search for the user name. - - 10. Choose the **Groups** tab, and then choose **Add User to Groups**. - - 11. Select the check box next to the administrators group, and then choose **Add to Groups**. - - 12. Choose the **Security Credentials** tab. Under **Sign-In Credentials** , choose **Manage Password**. - - 13. Select **Assign a custom password** , enter a password in the **Password** and **Confirm Password** boxes, and then choose **Apply**. - - +### Sign up for an AWS account @@ -107,0 +56 @@ Part of the sign-up procedure involves receiving a phone call and entering a PIN +To get started with AWS, you need an AWS account. For information about creating an AWS account, see [Getting started with an AWS account](https://docs.aws.amazon.com//accounts/latest/reference/getting-started.html) in the _AWS Account Management Reference Guide_.