AWS directoryservice documentation change
Summary
Updated documentation for viewing/updating AWS Managed Microsoft AD groups: streamlined prerequisites, improved CLI/PowerShell command examples with multi-line formatting, added direct reference links to CLI/PowerShell commands, and restructured content by merging redundant sections.
Security assessment
The changes primarily improve clarity and usability without addressing security vulnerabilities. The IAM permissions section was condensed but references the same managed policies and security best practices as before. No vulnerabilities, exploits, or security incidents are mentioned.
Diff
diff --git a/directoryservice/latest/admin-guide/ms_ad_view_update_group.md b/directoryservice/latest/admin-guide/ms_ad_view_update_group.md index 468b43db8..1532ed63e 100644 --- a//directoryservice/latest/admin-guide/ms_ad_view_update_group.md +++ b//directoryservice/latest/admin-guide/ms_ad_view_update_group.md @@ -11 +11 @@ Viewing a group's detailUpdating a group's details -Use the following procedure to view or update an AWS Managed Microsoft AD group's details with user and group management or AWS Directory Service Data in either the AWS Management Console, AWS CLI, or AWS Tools for PowerShell. +Use the following procedure to view or update an AWS Managed Microsoft AD group's details with AWS Directory Service Data in the AWS Management Console, AWS CLI, or AWS Tools for PowerShell. @@ -17 +17 @@ You can view or update a group's details in the AWS Management Console, AWS CLI, -###### Before you begin either procedure, you need to complete the following: +###### Before you begin, complete the following: @@ -21 +21 @@ You can view or update a group's details in the AWS Management Console, AWS CLI, - * To use user and group management or AWS Directory Service Data CLI, it must be enabled. For more information, see [Enable user and group management or Directory Service Data](./ms_ad_users_groups_mgmt_enable_disable.html). + * Enable [user and group management for Directory Service Data](./ms_ad_users_groups_mgmt_enable_disable.html). You can only enable this feature from the Primary AWS Region for your directory. For more information, see [Primary vs additional Regions](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/multi-region-global-primary-additional.html). @@ -23,3 +23 @@ You can view or update a group's details in the AWS Management Console, AWS CLI, - * You can only enable this feature from the Primary AWS Region for your directory. For more information, see [Primary vs additional Regions](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/multi-region-global-primary-additional.html). - - * You'll need the necessary IAM permissions to use AWS Directory Service Data. For more information, see [Directory Service API permissions: Actions, resources, and conditions reference](./UsingWithDS_IAM_ResourcePermissions.html). To get started granting permissions to your users and workloads, you can use AWS managed policies like [AWS managed policy: AWSDirectoryServiceDataFullAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataFullAccess) or [AWS managed policy: AWSDirectoryServiceDataReadOnlyAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataReadOnlyAccess). For more information, see [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies). + * You'll need the necessary IAM permissions to use AWS Directory Service Data. To get started, you can use the [AWS managed policy: AWSDirectoryServiceDataFullAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataFullAccess) or [AWS managed policy: AWSDirectoryServiceDataReadOnlyAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataReadOnlyAccess). For more information, see [Directory Service API permissions: Actions, resources, and conditions reference](./UsingWithDS_IAM_ResourcePermissions.html) and [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies). @@ -63,5 +61 @@ You can view an AWS Managed Microsoft AD group's details with the AWS Directory -###### To view an AWS Managed Microsoft AD group's details with the AWS CLI - -The following describes how to view an AWS Managed Microsoft AD group's details with the AWS CLI. - - * To view a group's details, open the AWS CLI, and run the following command, replacing the Directory ID and group name with your AWS Managed Microsoft AD Directory ID and group name: + * To view a group's details, open the AWS CLI, and run the following command with your Directory ID and group name: @@ -75 +69 @@ The following describes how to view an AWS Managed Microsoft AD group's details -###### To view an AWS Managed Microsoft AD group's group members with the AWS CLI +For more information, see [`describe-group`](https://docs.aws.amazon.com//cli/latest/reference/ds-data/describe-group.html). @@ -77,3 +71 @@ The following describes how to view an AWS Managed Microsoft AD group's details -The following describes how to view an AWS Managed Microsoft AD group's members with the AWS CLI. - - * To view a group's details, open the AWS CLI, and run the following command, replacing the Directory ID and group name with your AWS Managed Microsoft AD Directory ID and group name: + * To view a group's members, open the AWS CLI, and run the following command with your Directory ID and group name: @@ -87,2 +79 @@ The following describes how to view an AWS Managed Microsoft AD group's members -AWS Tools for PowerShell - +For more information, see [`list-group-members`](https://docs.aws.amazon.com//cli/latest/reference/ds-data/list-group-members.html). @@ -90 +81 @@ AWS Tools for PowerShell -You can view an AWS Managed Microsoft AD group's details with AWS Tools for PowerShell. +PowerShell @@ -92 +82,0 @@ You can view an AWS Managed Microsoft AD group's details with AWS Tools for Powe -###### To view an AWS Managed Microsoft AD group's details with AWS Tools for PowerShell @@ -94 +84 @@ You can view an AWS Managed Microsoft AD group's details with AWS Tools for Powe -The following describes how to view an AWS Managed Microsoft AD group's details with the Tools for PowerShell. +You can view an AWS Managed Microsoft AD group's details with AWS Tools for PowerShell. @@ -96 +86 @@ The following describes how to view an AWS Managed Microsoft AD group's details - * To view a group's details, open the PowerShell, and run the following command, replacing the Directory ID and group name with your AWS Managed Microsoft AD Directory ID and group name: + * To view a group's details, open PowerShell, and run the following command with your Directory ID and group name: @@ -104,3 +94 @@ The following describes how to view an AWS Managed Microsoft AD group's details -###### To view an AWS Managed Microsoft AD group's group members with AWS Tools for PowerShell - -The following describes how to view an AWS Managed Microsoft AD group's members with the Tools for PowerShell. +For more information, see [`Get-DSDGroup`](https://docs.aws.amazon.com//powershell/latest/reference/items/Get-DSDGroup.html). @@ -108 +96 @@ The following describes how to view an AWS Managed Microsoft AD group's members - * To view a group's details, open the PowerShell, and run the following command, replacing the Directory ID and group name with your AWS Managed Microsoft AD Directory ID and group name: + * To view a group's members, open PowerShell, and run the following command with your Directory ID and group name: @@ -116,16 +104 @@ The following describes how to view an AWS Managed Microsoft AD group's members -## Updating an AWS Managed Microsoft AD group's details - -Use the following procedure to update an AWS Managed Microsoft AD group's details with user and group management or AWS Directory Service Data in either the AWS Management Console, AWS CLI, or AWS Tools for PowerShell. - -###### Before you begin either procedure, you need to complete the following: - - * [Creating your AWS Managed Microsoft AD](./ms_ad_getting_started.html#ms_ad_getting_started_create_directory). - - * To use user and group management or AWS Directory Service Data CLI, it must be enabled. For more information, see [Enable user and group management or Directory Service Data](./ms_ad_users_groups_mgmt_enable_disable.html). - - * You can only enable this feature from the Primary AWS Region for your directory. For more information, see [Primary vs additional Regions](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/multi-region-global-primary-additional.html). - - * You'll need the necessary IAM permissions to use AWS Directory Service Data. For more information, see [Directory Service API permissions: Actions, resources, and conditions reference](./UsingWithDS_IAM_ResourcePermissions.html). To get started granting permissions to your users and workloads, you can use AWS managed policies like [AWS managed policy: AWSDirectoryServiceDataFullAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataFullAccess) or [AWS managed policy: AWSDirectoryServiceDataReadOnlyAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataReadOnlyAccess). For more information, see [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies). - - * [Creating an AWS Managed Microsoft AD group](./ms_ad_create_group.html). - +For more information, see [`Get-DSDGroupMemberList`](https://docs.aws.amazon.com//powershell/latest/reference/items/Get-DSDGroupMemberList.html). @@ -132,0 +106 @@ Use the following procedure to update an AWS Managed Microsoft AD group's detail +## Updating an AWS Managed Microsoft AD group's details @@ -133,0 +108 @@ Use the following procedure to update an AWS Managed Microsoft AD group's detail +Use the following procedure to update an AWS Managed Microsoft AD group's details with AWS Directory Service Data in the AWS Management Console, AWS CLI, or AWS Tools for PowerShell. @@ -170 +145 @@ When you update a group, you must include your directory ID number and group nam -To update a group's details, open the AWS CLI, and run the following command, replacing the Directory ID, group name, update type, and attribute with your AWS Managed Microsoft AD Directory ID, group name, and desired update type and attribute: +To update a group's details, open the AWS CLI, and run the following command with your Directory ID, group name, update type, and attribute: @@ -176 +151,5 @@ To update a group's details, open the AWS CLI, and run the following command, re - aws ds-data update-group --directory-id d-1234567890 --sam-account-name "your-group-name" --update-type "REPLACE" --group-scope "global" + aws ds-data update-group \ + --directory-id d-1234567890 \ + --sam-account-name "your-group-name" \ + --update-type "REPLACE" \ + --group-scope "global" @@ -178 +157,3 @@ To update a group's details, open the AWS CLI, and run the following command, re -AWS Tools for PowerShell +For more information, see [`update-group`](https://docs.aws.amazon.com//cli/latest/reference/ds-data/update-group.html). + +PowerShell @@ -187 +168,2 @@ When you update a group, you must include your directory ID number and group nam -To update a group's details, open the PowerShell, and run the following command, replacing the Directory ID, group name, update type, and attribute with your AWS Managed Microsoft AD Directory ID, group name, and desired update type and attribute: +To update a group's details, open PowerShell, and run the following command with your Directory ID, group name, update type, and attribute: + @@ -191,0 +174,5 @@ To update a group's details, open the PowerShell, and run the following command, + Update-DSDGroup ` + -DirectoryId d-1234567890 ` + -SAMAccountName "your-group-name" ` + -UpdateType "REPLACE" ` + -GroupScope "global" @@ -193 +180 @@ To update a group's details, open the PowerShell, and run the following command, - Update-DSDGroup -DirectoryId d-1234567890 -SAMAccountName "your-group-name" -UpdateType "REPLACE" -GroupScope "global" +For more information, see [`Update-DSDGroup`](https://docs.aws.amazon.com//powershell/latest/reference/items/Update-DSDGroup.html).