AWS singlesignon: Documentation URL corrections for IAM Identity Center
Summary
Fixed broken URLs in service authorization and SCP documentation links.
Security assessment
Changes correct URL formatting errors but do not alter security guidance, permissions, or address vulnerabilities.
Evidence
+The _AWS access portal_ provides IAM Identity Center users with single sign-on access to all their assigned AWS accounts and applications through a web portal. The AWS access portal is different from the [AWS Management Console](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/learn-whats-new.html), which is a collection of service consoles for managing AWS resources.
Diff
diff --git a/singlesignon/latest/userguide/manage-your-accounts.md b/singlesignon/latest/userguide/manage-your-accounts.md index 157068fed..5eafcdd3f 100644 --- a//singlesignon/latest/userguide/manage-your-accounts.md +++ b//singlesignon/latest/userguide/manage-your-accounts.md @@ -84 +84 @@ You can also assign your users single sign-on access to applications. For inform -The _AWS access portal_ provides IAM Identity Center users with single sign-on access to all their assigned AWS accounts and applications through a web portal. The AWS access portal is different from the [AWS Management Console](https://docs.aws.amazon.com//awsconsolehelpdocs/latest/gsg/learn-whats-new.html), which is a collection of service consoles for managing AWS resources. +The _AWS access portal_ provides IAM Identity Center users with single sign-on access to all their assigned AWS accounts and applications through a web portal. The AWS access portal is different from the [AWS Management Console](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/learn-whats-new.html), which is a collection of service consoles for managing AWS resources. @@ -117 +117 @@ A _service-linked role_ is a type of IAM role that is linked directly to an AWS -For the identity store service used by IAM Identity Center, users who have access to a member account can use API actions that require **Read** permissions. Member accounts have access to **Read** actions on both the **sso-directory** and **identitystore** namespaces. For more information, see [ Actions, resources, and condition keys for AWS IAM Identity Center directory](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html) and [Actions, resources, and condition keys for AWS Identity Store](https://docs.aws.amazon.com//service-authorization/latest/reference/list_awsidentitystore.html) in the _Service Authorization Reference_. +For the identity store service used by IAM Identity Center, users who have access to a member account can use API actions that require **Read** permissions. Member accounts have access to **Read** actions on both the **sso-directory** and **identitystore** namespaces. For more information, see [ Actions, resources, and condition keys for AWS IAM Identity Center directory](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiamidentitycenterdirectory.html) and [Actions, resources, and condition keys for AWS Identity Store](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsidentitystore.html) in the _Service Authorization Reference_. @@ -119 +119 @@ For the identity store service used by IAM Identity Center, users who have acces -To prevent users in member accounts from using API operations in the identity store, you can [attach a service control policy (SCP)](https://docs.aws.amazon.com//organizations/latest/userguide/orgs_manage_policies_scps_attach.html). An SCP is a type of organization policy that you can use to manage permissions in your organization. The following example SCP prevents users in member accounts from accessing any API operation in the identity store. +To prevent users in member accounts from using API operations in the identity store, you can [attach a service control policy (SCP)](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_attach.html). An SCP is a type of organization policy that you can use to manage permissions in your organization. The following example SCP prevents users in member accounts from accessing any API operation in the identity store. @@ -133 +133 @@ To ensure your AWS managed applications function well with your IAM Identity Cen -For more information, see [Service control policies (SCPs)](https://docs.aws.amazon.com//organizations/latest/userguide/orgs_manage_policies_scps.html) in the _AWS Organizations User Guide_. +For more information, see [Service control policies (SCPs)](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html) in the _AWS Organizations User Guide_.