AWS res documentation change
Summary
Minor grammatical improvements and wording clarifications for project permissions and roles.
Security assessment
Grammatical refinements without security impact. No changes to security concepts or access control documentation.
Diff
diff --git a/res/archive/release-minus-1/ug/concepts-and-definitions.md b/res/archive/release-minus-1/ug/concepts-and-definitions.md index 24b056a6a..63fcfb3a0 100644 --- a//res/archive/release-minus-1/ug/concepts-and-definitions.md +++ b//res/archive/release-minus-1/ug/concepts-and-definitions.md @@ -14 +14 @@ This section describes key concepts and defines terminology specific to Research -A file browser is a part of the RES user interface where users who are currently logged-in can view their file system. +A file browser is a part of the RES user interface where users who are currently logged in can view their file system. @@ -29 +29 @@ An administrative delegate with access to RES resources that are shared across a -A project is a logical partition within the application that serves as a distinct boundary for data and compute resources; this ensures governance over data flow and prevents sharing data and VDI hosts across projects. +A project is a logical partition within the application that serves as a distinct boundary for data and compute resources. This ensures governance over data flow and prevents sharing data and VDI hosts across projects. @@ -34 +34 @@ A project is a logical partition within the application that serves as a distinc -Project-based permissions describes a logical partition of both data and VDI hosts in a system where multiple projects can exist. A user's access to data and VDI hosts within a project is determined by their associated role(s). A user must be assigned access (or project membership) for each project to which they require access. Otherwise, a user is unable to access project data and VDIs when they have not been granted membership. +Project-based permissions describes a logical partition of both data and VDI hosts in a system where multiple projects can exist. A user's access to data and VDI hosts within a project is determined by their associated roles. A user must be assigned access (or project membership) for each project to which they require access. Otherwise, a user is unable to access project data and VDIs when they have not been granted membership. @@ -44 +44 @@ An end user of RES resources (VDI, storage, etc). Scope and permissions are rest -An administrative delegate with access to, and ownership over, a specific project. Scope and permissions are restricted to the project(s) they own. They can assign permissions to project members in the projects they own. +An administrative delegate with access to, and ownership over, a specific project. Scope and permissions are restricted to the projects they own. They can assign permissions to project members in the projects they own.