AWS Security ChangesHomeSearch

AWS security-ir medium security documentation change

Service: security-ir · 2026-06-22 · Security-related medium

File: security-ir/latest/userguide/onboarding-prerequisites.md

Summary

Added IAM permission requirement note for delegated administrator setup

Security assessment

Explicitly states that AdministratorAccess permissions are mandatory to prevent enablement failures, addressing security deployment misconfiguration risks.

Diff

diff --git a/security-ir/latest/userguide/onboarding-prerequisites.md b/security-ir/latest/userguide/onboarding-prerequisites.md
index defe9bfa2..65eded2c8 100644
--- a//security-ir/latest/userguide/onboarding-prerequisites.md
+++ b//security-ir/latest/userguide/onboarding-prerequisites.md
@@ -12,0 +13,4 @@ The only required prerequisite is enabling [AWS Organizations](https://docs.aws.
+###### Note
+
+The AWS Identity and Access Management (IAM) principal used to sign in to the delegated administrator account during enablement must have `AdministratorAccess` permissions. Without these permissions, the enablement process fails. 
+