AWS security-ir medium security documentation change
Summary
Added IAM permission requirement note for delegated administrator setup
Security assessment
Explicitly states that AdministratorAccess permissions are mandatory to prevent enablement failures, addressing security deployment misconfiguration risks.
Diff
diff --git a/security-ir/latest/userguide/onboarding-prerequisites.md b/security-ir/latest/userguide/onboarding-prerequisites.md index defe9bfa2..65eded2c8 100644 --- a//security-ir/latest/userguide/onboarding-prerequisites.md +++ b//security-ir/latest/userguide/onboarding-prerequisites.md @@ -12,0 +13,4 @@ The only required prerequisite is enabling [AWS Organizations](https://docs.aws. +###### Note + +The AWS Identity and Access Management (IAM) principal used to sign in to the delegated administrator account during enablement must have `AdministratorAccess` permissions. Without these permissions, the enablement process fails. +