AWS ssm-sap documentation change
Summary
Simplified AWS account setup instructions by replacing detailed signup/IAM user creation steps with a single link to AWS account documentation.
Security assessment
The change removes security best practices content about root user risks and IAM user creation without adding new security guidance. While it deletes security recommendations, there's no evidence it addresses a specific vulnerability.
Diff
diff --git a/ssm-sap/latest/userguide/setting-up.md b/ssm-sap/latest/userguide/setting-up.md index ccd31992e..13fb449cf 100644 --- a//ssm-sap/latest/userguide/setting-up.md +++ b//ssm-sap/latest/userguide/setting-up.md @@ -7 +7 @@ -Sign up for AWSCreate an IAM user +Sign up for an AWS account @@ -11 +11 @@ Sign up for AWSCreate an IAM user -If you are new to AWS, begin with the following topics. When you sign up for AWS, your AWS account is automatically signed up for all services in AWS, including Systems Manager for SAP. +When you sign up for AWS, your AWS account is automatically signed up for all services in AWS, including Systems Manager for SAP. @@ -13 +13 @@ If you are new to AWS, begin with the following topics. When you sign up for AWS -###### Topics +## Sign up for an AWS account @@ -15,32 +15 @@ If you are new to AWS, begin with the following topics. When you sign up for AWS - * Sign up for AWS - - * Create an IAM user - - - - -## Sign up for AWS - -###### To sign up for an AWS account - -If you do not have an AWS account, complete the following steps to create one. - - 1. Open https://portal.aws.amazon.com/billing/signup. - - 2. Follow the online instructions. - -Part of the sign-up procedure involves email verification and either receiving a phone call or SMS to enter a verification code. - -When you sign up for an AWS account, an _AWS account root user_ is created. The root user has access to all AWS services and resources in the account. As a security best practice, assign administrative access to a user, and use only the root user to perform [tasks that require root user access](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#root-user-tasks). - - - - -## Create an IAM user - -To create an administrator user, choose one of the following options. - -Choose one way to manage your administrator | To | By | You can also ----|---|---|--- -In IAM Identity Center (Recommended) | Use short-term credentials to access AWS. This aligns with the security best practices. For information about best practices, see [Security best practices in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#bp-users-federation-idp) in the _IAM User Guide_. | Following the instructions in [Getting started](https://docs.aws.amazon.com/singlesignon/latest/userguide/getting-started.html) in the _AWS IAM Identity Center User Guide_. | Configure programmatic access by [Configuring the AWS CLI to use AWS IAM Identity Center](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html) in the _AWS Command Line Interface User Guide_. -In IAM (Not recommended) | Use long-term credentials to access AWS. | Following the instructions in [Create an IAM user for emergency access](https://docs.aws.amazon.com/IAM/latest/UserGuide/getting-started-emergency-iam-user.html) in the _IAM User Guide_. | Configure programmatic access by [Manage access keys for IAM users](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html) in the _IAM User Guide_. +To get started with AWS, you need an AWS account. For information about creating an AWS account, see [Getting started with an AWS account](https://docs.aws.amazon.com/accounts/latest/reference/getting-started.html) in the _AWS Account Management Reference Guide_.