AWS controltower: Correct URL formatting in IAM Identity Center documentation
Summary
Fixed double slashes in URLs referencing AWS Security Blog and IAM Identity Center user guides.
Security assessment
The update resolves broken links without modifying security guidance or addressing vulnerabilities.
Evidence
+You can delegate administration of AWS IAM Identity Center in your organization to an account other than the management account, by using the delegated administrator feature of IAM Identity Center. If you choose to use this feature, be aware that Administrators with access to manage group membership _also_ can manage groups assigned to the management account. For more information, see this blog post, entitled, [Getting started with AWS SSO delegated administration](https://aws.amazon.com/blogs/security/getting-started-with-aws-sso-delegated-administration/)
Diff
diff --git a/controltower/latest/userguide/sso.md b/controltower/latest/userguide/sso.md index 5e56abff9..1a0fec328 100644 --- a//controltower/latest/userguide/sso.md +++ b//controltower/latest/userguide/sso.md @@ -25 +25 @@ If you choose the recommended default, AWS Control Tower sets up your landing zo -You can delegate administration of AWS IAM Identity Center in your organization to an account other than the management account, by using the delegated administrator feature of IAM Identity Center. If you choose to use this feature, be aware that Administrators with access to manage group membership _also_ can manage groups assigned to the management account. For more information, see this blog post, entitled, [Getting started with AWS SSO delegated administration](https://aws.amazon.com/blogs//security/getting-started-with-aws-sso-delegated-administration/) +You can delegate administration of AWS IAM Identity Center in your organization to an account other than the management account, by using the delegated administrator feature of IAM Identity Center. If you choose to use this feature, be aware that Administrators with access to manage group membership _also_ can manage groups assigned to the management account. For more information, see this blog post, entitled, [Getting started with AWS SSO delegated administration](https://aws.amazon.com/blogs/security/getting-started-with-aws-sso-delegated-administration/) @@ -33 +33 @@ Here are some good things to know when working with IAM Identity Center user acc - * If you specify a new IAM Identity Center user email address when you update the provisioned product associated with an account that was vended by Account Factory, AWS Control Tower creates a new IAM Identity Center user account. The previously created user account is not removed. If you prefer to remove the previous IAM Identity Center user email address from AWS IAM Identity Center, see [Disabling a User](https://docs.aws.amazon.com//singlesignon/latest/userguide/disableuser.html). + * If you specify a new IAM Identity Center user email address when you update the provisioned product associated with an account that was vended by Account Factory, AWS Control Tower creates a new IAM Identity Center user account. The previously created user account is not removed. If you prefer to remove the previous IAM Identity Center user email address from AWS IAM Identity Center, see [Disabling a User](https://docs.aws.amazon.com/singlesignon/latest/userguide/disableuser.html). @@ -35 +35 @@ Here are some good things to know when working with IAM Identity Center user acc - * AWS IAM Identity Center has been [integrated with Azure Active Directory](https://aws.amazon.com//blogs/aws/the-next-evolution-in-aws-single-sign-on/), and you can connect your existing Azure Active Directory to AWS Control Tower. + * AWS IAM Identity Center has been [integrated with Azure Active Directory](https://aws.amazon.com/blogs/aws/the-next-evolution-in-aws-single-sign-on/), and you can connect your existing Azure Active Directory to AWS Control Tower. @@ -37 +37 @@ Here are some good things to know when working with IAM Identity Center user acc - * For more information about how the behavior of AWS Control Tower interacts with AWS IAM Identity Center and different identity sources, refer to the [Considerations for Changing Your Identity Source](https://docs.aws.amazon.com//singlesignon/latest/userguide/manage-your-identity-source-considerations.html) in the AWS IAM Identity Center documentation. + * For more information about how the behavior of AWS Control Tower interacts with AWS IAM Identity Center and different identity sources, refer to the [Considerations for Changing Your Identity Source](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-identity-source-considerations.html) in the AWS IAM Identity Center documentation.