AWS IAM documentation change
Summary
Updated Organizations reference to 'AWS Organizations' in tag policy documentation
Security assessment
Documentation link formatting change without security impact
Diff
diff --git a/IAM/latest/UserGuide/access_tags.md b/IAM/latest/UserGuide/access_tags.md index 3620c3f80..9573eae8d 100644 --- a//IAM/latest/UserGuide/access_tags.md +++ b//IAM/latest/UserGuide/access_tags.md @@ -113 +113 @@ You can use a condition in your IAM policies to control whether specific tag key -We recommend that when you use policies to control access using tags, you use the [aws:TagKeys condition key](./reference_policies_condition-keys.html#condition-keys-tagkeys). AWS services that support tags might allow you to create multiple tag key names that differ only by case, such as tagging an Amazon EC2 instance with `stack=production` and `Stack=test`. Key names are not case sensitive in policy conditions. This means that if you specify `"aws:ResourceTag/TagKey1": "Value1"` in the condition element of your policy, then the condition matches a resource tag key named either `TagKey1` or `tagkey1`, but not both. To prevent duplicate tags with a key that varies only by case, use the `aws:TagKeys` condition to define the tag keys that your users can apply, or use tag policies, available with AWS Organizations. For more information see [Tag Policies](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html) in the _Organizations User Guide_. +We recommend that when you use policies to control access using tags, you use the [aws:TagKeys condition key](./reference_policies_condition-keys.html#condition-keys-tagkeys). AWS services that support tags might allow you to create multiple tag key names that differ only by case, such as tagging an Amazon EC2 instance with `stack=production` and `Stack=test`. Key names are not case sensitive in policy conditions. This means that if you specify `"aws:ResourceTag/TagKey1": "Value1"` in the condition element of your policy, then the condition matches a resource tag key named either `TagKey1` or `tagkey1`, but not both. To prevent duplicate tags with a key that varies only by case, use the `aws:TagKeys` condition to define the tag keys that your users can apply, or use tag policies, available with AWS Organizations. For more information see [Tag Policies](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies.html) in the _AWS Organizations User Guide_.