AWS awsconsolehelpdocs documentation change
Summary
Updated documentation for AWS Management Console Private Access: changed availability to all commercial regions, replaced region list with UXC guidance, restructured supported services list, added notes about billing console limitations and degraded feature behavior.
Security assessment
The change adds documentation about AWS User Experience Customization (UXC) as a security control to limit console visibility, which reduces attack surface by restricting accessible regions/services. However, there's no evidence of addressing a specific vulnerability. The billing console restriction note also enhances security awareness.
Diff
diff --git a/awsconsolehelpdocs/latest/gsg/supported-regions-consoles.md b/awsconsolehelpdocs/latest/gsg/supported-regions-consoles.md index 0701f6d9d..f85abc96e 100644 --- a//awsconsolehelpdocs/latest/gsg/supported-regions-consoles.md +++ b//awsconsolehelpdocs/latest/gsg/supported-regions-consoles.md @@ -7 +7 @@ -# Supported AWS Regions, service consoles, and features for Private Access +# Supported AWS Regions, service consoles, and features in Private Access @@ -9,69 +9 @@ -AWS Management Console Private Access supports only a subset of Regions and AWS services. Unsupported service consoles will be inactive in the AWS Management Console. In addition, certain AWS Management Console features might be disabled when using AWS Management Console Private Access, for example, the [Default Region](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/select-region.html) selection in Unified Settings. - -The following Regions and service consoles are supported. - -###### Supported Regions - - * US East (Ohio) - - * US East (N. Virginia) - - * US West (N. California) - - * US West (Oregon) - - * Asia Pacific (Hyderabad) - - * Asia Pacific (Mumbai) - - * Asia Pacific (Seoul) - - * Asia Pacific (Osaka) - - * Asia Pacific (Singapore) - - * Asia Pacific (Sydney) - - * Asia Pacific (Malaysia) - - * Asia Pacific (Thailand) - - * Asia Pacific (Tokyo) - - * Canada (Central) - - * Europe (Frankfurt) - - * Europe (Ireland) - - * Europe (London) - - * Europe (Paris) - - * Europe (Stockholm) - - * South America (São Paulo) - - * Africa (Cape Town) - - * Asia Pacific (Hong Kong) - - * Asia Pacific (Jakarta) - - * Asia Pacific (Melbourne) - - * Canada West (Calgary) - - * Mexico (Central) - - * Europe (Milan) - - * Europe (Spain) - - * Europe (Zurich) - - * Middle East (Bahrain) - - * Middle East (UAE) - - * Israel (Tel Aviv) +AWS Management Console Private Access is available in all commercial AWS Regions but supports only a subset of AWS service consoles. In addition, certain AWS Management Console features might be disabled when using AWS Management Console Private Access, for example, AWS CloudShell and the [Default Region](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/select-region.html) setting. @@ -78,0 +11 @@ The following Regions and service consoles are supported. +###### Note @@ -79,0 +13 @@ The following Regions and service consoles are supported. +To help users avoid errors from navigating to unsupported AWS Regions or service consoles, account administrators can use AWS User Experience Customization (UXC) to control which Regions and service consoles are visible in the AWS Management Console. For more information, see [AWS User Experience Customization (UXC)](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/uxc.html). @@ -80,0 +15 @@ The following Regions and service consoles are supported. +The following service consoles are fully supported or provide graceful degradation of features. You can still navigate to other consoles, but will require internet connectivity with missing AWS PrivateLink support for AWS services or unsupported console-only APIs. @@ -84,12 +18,0 @@ The following Regions and service consoles are supported. - * Amazon API Gateway - - * AWS App Mesh - - * AWS Transform MGN - - * AWS Artifact - - * Amazon Athena - - * AWS Audit Manager - @@ -98,8 +20,0 @@ The following Regions and service consoles are supported. - * AWS Batch - - * AWS Billing Conductor - - * AWS Billing and Cost Management - - * AWS Budgets - @@ -108,2 +22,0 @@ The following Regions and service consoles are supported. - * AWS Cloud Map - @@ -112,2 +24,0 @@ The following Regions and service consoles are supported. - * Amazon CloudFront - @@ -116,3 +27 @@ The following Regions and service consoles are supported. - * Amazon CloudWatch - - * AWS CodeArtifact + * AWS Database Migration Service @@ -120 +29 @@ The following Regions and service consoles are supported. - * AWS CodeBuild + * AWS Directory Service @@ -122 +31 @@ The following Regions and service consoles are supported. - * AWS CodeCommit + * AWS Glue @@ -124 +33 @@ The following Regions and service consoles are supported. - * AWS CodeDeploy + * AWS Glue DataBrew @@ -126 +35 @@ The following Regions and service consoles are supported. - * Amazon CodeGuru + * AWS Identity and Access Management @@ -128 +37 @@ The following Regions and service consoles are supported. - * AWS CodePipeline + * AWS Key Management Service @@ -130 +39 @@ The following Regions and service consoles are supported. - * Amazon Comprehend + * AWS Lambda @@ -132 +41 @@ The following Regions and service consoles are supported. - * Amazon Comprehend Medical + * AWS Network Firewall @@ -134 +43 @@ The following Regions and service consoles are supported. - * AWS Compute Optimizer + * AWS Organizations @@ -136 +45 @@ The following Regions and service consoles are supported. - * AWS Console Home + * AWS Private Certificate Authority @@ -138 +47 @@ The following Regions and service consoles are supported. - * AWS Control Tower + * AWS Resource Access Manager @@ -140 +49 @@ The following Regions and service consoles are supported. - * Amazon DataZone + * AWS Resource Groups @@ -142 +51 @@ The following Regions and service consoles are supported. - * AWS Database Migration Service + * AWS Security Hub @@ -144 +53 @@ The following Regions and service consoles are supported. - * AWS DataSync + * AWS Service Catalog @@ -146 +55 @@ The following Regions and service consoles are supported. - * AWS DeepRacer + * AWS Step Functions @@ -148 +57 @@ The following Regions and service consoles are supported. - * AWS Direct Connect + * AWS Systems Manager @@ -150 +59 @@ The following Regions and service consoles are supported. - * AWS Directory Service + * AWS WAF @@ -152 +61 @@ The following Regions and service consoles are supported. - * Amazon DocumentDB + * Amazon API Gateway @@ -154 +63 @@ The following Regions and service consoles are supported. - * Amazon DynamoDB + * Amazon Athena @@ -156 +65 @@ The following Regions and service consoles are supported. - * Amazon EC2 + * Amazon CloudWatch @@ -158 +67 @@ The following Regions and service consoles are supported. - * Amazon EC2 Global View + * Amazon DynamoDB @@ -160 +69 @@ The following Regions and service consoles are supported. - * EC2 Image Builder + * Amazon EMR @@ -162 +71 @@ The following Regions and service consoles are supported. - * Amazon EC2 Instance Connect + * Amazon Elastic Compute Cloud @@ -168,2 +76,0 @@ The following Regions and service consoles are supported. - * AWS Elastic Disaster Recovery - @@ -174,20 +80,0 @@ The following Regions and service consoles are supported. - * Elastic Load Balancing - - * Amazon ElastiCache - - * Amazon EMR - - * Amazon EventBridge - - * AWS Firewall Manager - - * Amazon GameLift Servers - - * AWS Glue