AWS directoryservice documentation change
Summary
Updated password reset documentation: removed 'user and group management' references, clarified prerequisites, improved CLI/PowerShell examples with multi-line syntax, and added command references.
Security assessment
The changes focus on improving clarity and accuracy of password reset procedures but don't address any specific security vulnerability. Password resets are standard security operations, but these updates are routine documentation improvements without evidence of patching a security flaw.
Diff
diff --git a/directoryservice/latest/admin-guide/ms_ad_reset_user_pswd.md b/directoryservice/latest/admin-guide/ms_ad_reset_user_pswd.md index 141b4475c..648fcf4ec 100644 --- a//directoryservice/latest/admin-guide/ms_ad_reset_user_pswd.md +++ b//directoryservice/latest/admin-guide/ms_ad_reset_user_pswd.md @@ -9 +9 @@ -Use the following procedure to reset an AWS Managed Microsoft AD user's password to enable their account with user and group management or AWS Directory Service Data in either the AWS Management Console, AWS CLI, AWS Tools for PowerShell. +Use the following procedure to reset an AWS Managed Microsoft AD user's password to enable their account with AWS Directory Service Data in the AWS Management Console, AWS CLI, or AWS Tools for PowerShell. @@ -11 +11 @@ Use the following procedure to reset an AWS Managed Microsoft AD user's password -###### Before you begin either procedure, you need to complete the following: +###### Before you begin, complete the following: @@ -15 +15 @@ Use the following procedure to reset an AWS Managed Microsoft AD user's password - * To use user and group management or AWS Directory Service Data CLI, it must be enabled. For more information, see [Enable user and group management or Directory Service Data](./ms_ad_users_groups_mgmt_enable_disable.html). + * Enable [user and group management for Directory Service Data](./ms_ad_users_groups_mgmt_enable_disable.html). You can only enable this feature from the Primary AWS Region for your directory. For more information, see [Primary vs additional Regions](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/multi-region-global-primary-additional.html). @@ -17,3 +17 @@ Use the following procedure to reset an AWS Managed Microsoft AD user's password - * You can only enable this feature from the Primary AWS Region for your directory. For more information, see [Primary vs additional Regions](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/multi-region-global-primary-additional.html). - - * You'll need the necessary IAM permissions to use AWS Directory Service Data. For more information, see [Directory Service API permissions: Actions, resources, and conditions reference](./UsingWithDS_IAM_ResourcePermissions.html). To get started granting permissions to your users and workloads, you can use AWS managed policies like [AWS managed policy: AWSDirectoryServiceDataFullAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataFullAccess) or [AWS managed policy: AWSDirectoryServiceDataReadOnlyAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataReadOnlyAccess). For more information, see [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies). + * You'll need the necessary IAM permissions to use AWS Directory Service Data. To get started, you can use the [AWS managed policy: AWSDirectoryServiceDataFullAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataFullAccess) or [AWS managed policy: AWSDirectoryServiceDataReadOnlyAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataReadOnlyAccess). For more information, see [Directory Service API permissions: Actions, resources, and conditions reference](./UsingWithDS_IAM_ResourcePermissions.html) and [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies). @@ -76 +74 @@ AWS CLI -You can reset an AWS Managed Microsoft AD use's password to enable their account with the AWS Directory Service Data CLI. +You can reset an AWS Managed Microsoft AD user's password to enable their account with the AWS Directory Service Data CLI. @@ -80 +78 @@ You can reset an AWS Managed Microsoft AD use's password to enable their account -The reset user's password command uses `aws ds`. +This command uses the [`aws ds`](https://docs.aws.amazon.com//cli/latest/reference/ds/) namespace. @@ -84 +82,3 @@ The reset user's password command uses `aws ds`. - * To reset a user's password, open the AWS CLI, and run the following command, replacing the Directory ID, username, and password with your AWS Managed Microsoft AD Directory ID, username, and desired credentials: + * To reset a user's password, open the AWS CLI, and run the following command with your Directory ID, username, and password: + + @@ -87,0 +88,4 @@ The reset user's password command uses `aws ds`. + aws ds reset-user-password \ + --directory-id d-1234567890 \ + --user-name "jane.doe" \ + --new-password "your-password" @@ -88,0 +93 @@ The reset user's password command uses `aws ds`. +For more information, see [`reset-user-password`](https://docs.aws.amazon.com//cli/latest/reference/ds/reset-user-password.html). @@ -90 +95 @@ The reset user's password command uses `aws ds`. - aws ds reset-user-password --directory-id d-1234567890 --user-name "jane.doe" --new-password "your-password" +PowerShell @@ -92 +96,0 @@ The reset user's password command uses `aws ds`. -AWS Tools for PowerShell @@ -93,0 +98 @@ AWS Tools for PowerShell +You can reset an AWS Managed Microsoft AD user's password to enable their account with AWS Tools for PowerShell. @@ -95 +100,3 @@ AWS Tools for PowerShell -You can reset an AWS Managed Microsoft AD use's password to enable their account with AWS Tools for PowerShell. +###### Note + +This command uses the [`AWS.Tools.DirectoryService`](https://docs.aws.amazon.com//powershell/latest/reference/items/DirectoryService_cmdlets.html) module. @@ -99 +106,2 @@ You can reset an AWS Managed Microsoft AD use's password to enable their account - * To reset a user's password, open the PowerShell, and run the following command, replacing the Directory ID, username, and password with your AWS Managed Microsoft AD Directory ID, username, and desired credentials: + * To reset a user's password, open PowerShell, and run the following command with your Directory ID, username, and password: + @@ -103,0 +112,4 @@ You can reset an AWS Managed Microsoft AD use's password to enable their account + Reset-DSUserPassword ` + -DirectoryId d-1234567890 ` + -UserName "jane.doe" ` + -NewPassword "your-password" @@ -105 +117 @@ You can reset an AWS Managed Microsoft AD use's password to enable their account - Reset-DSUserPassword -DirectoryId d-1234567890 -UserName "jane.doe" -NewPassword "your-password" +For more information, see [`Reset-DSUserPassword`](https://docs.aws.amazon.com//powershell/latest/reference/items/Reset-DSUserPassword.html).