AWS directoryservice documentation change
Summary
Updated documentation for viewing/updating AWS Managed Microsoft AD users. Removed references to 'user and group management', streamlined prerequisites, improved CLI/PowerShell command examples with multi-line formatting, added links to command references, and clarified regional requirements.
Security assessment
The changes are documentation improvements without evidence of addressing a specific security vulnerability. Updates focus on command syntax clarity and prerequisite reorganization, with no references to CVE, vulnerabilities, or security patches. The IAM permission references were condensed but not substantively changed.
Diff
diff --git a/directoryservice/latest/admin-guide/ms_ad_view_update_user.md b/directoryservice/latest/admin-guide/ms_ad_view_update_user.md index 8b8046bfc..52fffd92b 100644 --- a//directoryservice/latest/admin-guide/ms_ad_view_update_user.md +++ b//directoryservice/latest/admin-guide/ms_ad_view_update_user.md @@ -11 +11 @@ Viewing a user's detailsUpdating a user's details -Use the following procedure to view or update an AWS Managed Microsoft AD user's details with user and group management or AWS Directory Service Data in either the AWS Management Console, AWS CLI, or AWS Tools for PowerShell. +Use the following procedure to view or update an AWS Managed Microsoft AD user's details with AWS Directory Service Data in the AWS Management Console, AWS CLI, or AWS Tools for PowerShell. @@ -15 +15 @@ Use the following procedure to view or update an AWS Managed Microsoft AD user's -You can view a user's details in the AWS Management Console or AWS CLI. The user's details includes profile and account information and group membership. +You can view a user's details in the AWS Management Console or AWS CLI. The user's details include profile and account information and group membership. @@ -17 +17 @@ You can view a user's details in the AWS Management Console or AWS CLI. The user -###### Before you begin either procedure, you need to complete the following: +###### Before you begin, complete the following: @@ -21 +21 @@ You can view a user's details in the AWS Management Console or AWS CLI. The user - * To use user and group management or AWS Directory Service Data CLI, it must be enabled. For more information, see [Enable user and group management or Directory Service Data](./ms_ad_users_groups_mgmt_enable_disable.html). + * Enable [user and group management for Directory Service Data](./ms_ad_users_groups_mgmt_enable_disable.html). You can only enable this feature from the Primary AWS Region for your directory. For more information, see [Primary vs additional Regions](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/multi-region-global-primary-additional.html). @@ -23,3 +23 @@ You can view a user's details in the AWS Management Console or AWS CLI. The user - * You can only enable this feature from the Primary AWS Region for your directory. For more information, see [Primary vs additional Regions](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/multi-region-global-primary-additional.html). - - * You'll need the necessary IAM permissions to use AWS Directory Service Data. For more information, see [Directory Service API permissions: Actions, resources, and conditions reference](./UsingWithDS_IAM_ResourcePermissions.html). To get started granting permissions to your users and workloads, you can use AWS managed policies like [AWS managed policy: AWSDirectoryServiceDataFullAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataFullAccess) or [AWS managed policy: AWSDirectoryServiceDataReadOnlyAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataReadOnlyAccess). For more information, see [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies). + * You'll need the necessary IAM permissions to use AWS Directory Service Data. To get started, you can use the [AWS managed policy: AWSDirectoryServiceDataFullAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataFullAccess) or [AWS managed policy: AWSDirectoryServiceDataReadOnlyAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataReadOnlyAccess). For more information, see [Directory Service API permissions: Actions, resources, and conditions reference](./UsingWithDS_IAM_ResourcePermissions.html) and [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies). @@ -71 +69 @@ The following describes how to view an AWS Managed Microsoft AD user's details w - * To view a user's details, open the AWS CLI, and run the following command, replacing the Directory ID and username with your AWS Managed Microsoft AD Directory ID and username: + * To view a user's details, open the AWS CLI, and run the following command with your Directory ID and username: @@ -78,0 +77,2 @@ The following describes how to view an AWS Managed Microsoft AD user's details w +For more information, see [`describe-user`](https://docs.aws.amazon.com//cli/latest/reference/ds-data/describe-user.html). + @@ -83 +83 @@ The following describes how to view an AWS Managed Microsoft AD user's group mem - * To view a user's group memberships, open the AWS CLI, and run the following command, replacing the Directory ID and username with your AWS Managed Microsoft AD Directory ID and username: + * To view a user's group memberships, open the AWS CLI, and run the following command with your Directory ID and username: @@ -90,0 +91,2 @@ The following describes how to view an AWS Managed Microsoft AD user's group mem +For more information, see [`list-groups-for-member`](https://docs.aws.amazon.com//cli/latest/reference/ds-data/list-groups-for-member.html). + @@ -93 +95 @@ For more information on user attributes, see [AWS Directory Service Data attribu -AWS Tools for PowerShell +PowerShell @@ -102 +104 @@ The following describes how to view an AWS Managed Microsoft AD user's details w - * To view a user's details, open the PowerShell, and run the following command, replacing the Directory ID and username with your AWS Managed Microsoft AD Directory ID and username: + * To view a user's details, open PowerShell, and run the following command with your Directory ID and username: @@ -109,0 +112,2 @@ The following describes how to view an AWS Managed Microsoft AD user's details w +For more information, see [`Get-DSDUser`](https://docs.aws.amazon.com//powershell/latest/reference/items/Get-DSDUser.html). + @@ -114 +118 @@ The following describes how to view an AWS Managed Microsoft AD user's group mem - * To view a user's group memberships, open the PowerShell, and run the following command, replacing the Directory ID and username with your AWS Managed Microsoft AD Directory ID and username: + * To view a user's group memberships, open PowerShell, and run the following command with your Directory ID and username: @@ -121,0 +126,2 @@ The following describes how to view an AWS Managed Microsoft AD user's group mem +For more information, see [`Get-DSDGroupsForMemberList`](https://docs.aws.amazon.com//powershell/latest/reference/items/Get-DSDGroupsForMemberList.html). + @@ -126 +132 @@ For more information on user attributes, see [AWS Directory Service Data attribu -Use the following procedure to update an AWS Managed Microsoft AD user with user and group management or AWS Directory Service Data in either the AWS Management Console, AWS CLI, AWS Tools for PowerShell. +Use the following procedure to update an AWS Managed Microsoft AD user with AWS Directory Service Data in the AWS Management Console, AWS CLI, or AWS Tools for PowerShell. @@ -132,15 +137,0 @@ The minimum attribute length is 1. -###### Before you begin either procedure, you need to complete the following: - - * [Creating your AWS Managed Microsoft AD](./ms_ad_getting_started.html#ms_ad_getting_started_create_directory). - - * To use user and group management or AWS Directory Service Data CLI, it must be enabled. For more information, see [Enable user and group management or Directory Service Data](./ms_ad_users_groups_mgmt_enable_disable.html). - - * You can only enable this feature from the Primary AWS Region for your directory. For more information, see [Primary vs additional Regions](https://docs.aws.amazon.com/directoryservice/latest/admin-guide/multi-region-global-primary-additional.html). - - * You'll need the necessary IAM permissions to use AWS Directory Service Data. For more information, see [Directory Service API permissions: Actions, resources, and conditions reference](./UsingWithDS_IAM_ResourcePermissions.html). To get started granting permissions to your users and workloads, you can use AWS managed policies like [AWS managed policy: AWSDirectoryServiceDataFullAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataFullAccess) or [AWS managed policy: AWSDirectoryServiceDataReadOnlyAccess](./security-iam-awsmanpol.html#security-iam-awsmanpol-AWSDirectoryServiceDataReadOnlyAccess). For more information, see [Security best practices in IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies). - - * [Creating an AWS Managed Microsoft AD user](./ms_ad_create_user.html). - - - - @@ -186 +177 @@ When you update a user's account, you must include your directory ID number and - * To update a user's details, open the AWS CLI, and run the following command, replacing the Directory ID, username, user type, and attribute value with your AWS Managed Microsoft AD Directory ID, username, and desired user type and attribute value: + * To update a user's details, open the AWS CLI, and run the following command with your Directory ID, username, update type, and attribute value: @@ -192 +183,7 @@ When you update a user's account, you must include your directory ID number and - aws ds-data update-user --directory-id d-1234567890 --sam-account-name "jane.doe" --update-type "REPLACE" --surname "Doe" + aws ds-data update-user \ + --directory-id d-1234567890 \ + --sam-account-name "jane.doe" \ + --update-type "REPLACE" \ + --surname "Doe" + +For more information, see [`update-user`](https://docs.aws.amazon.com//cli/latest/reference/ds-data/update-user.html). @@ -200 +197 @@ For more information on user attributes, see [AWS Directory Service Data attribu -AWS Tools for PowerShell +PowerShell @@ -207 +204,2 @@ When you update a user's account, you must include your directory ID number and - * To update a user's details, open the PowerShell, and run the following command, replacing the Directory ID, username, user type, and attribute value with your AWS Managed Microsoft AD Directory ID, username, and desired user type and attribute value: + * To update a user's details, open PowerShell, and run the following command with your Directory ID, username, update type, and attribute value: + @@ -211,0 +210,5 @@ When you update a user's account, you must include your directory ID number and + Update-DSDUser ` + -DirectoryId d-1234567890 ` + -SAMAccountName "jane.doe" ` + -UpdateType "REPLACE" ` + -Surname "Doe" @@ -213 +216 @@ When you update a user's account, you must include your directory ID number and - Update-DSDUser -DirectoryId d-1234567890 -SAMAccountName "jane.doe" -UpdateType "REPLACE" -Surname "Doe" +For more information, see [`Update-DSDUser`](https://docs.aws.amazon.com//powershell/latest/reference/items/Update-DSDUser.html).