AWS IAM documentation change
Summary
Replaced inline JSON policy with reference link and added changelog entry about expanded permissions
Security assessment
Change improves documentation structure by referencing external policy details and documents added path-based permissions in managed policy. While related to security features, there's no evidence of addressing a specific vulnerability
Diff
diff --git a/IAM/latest/UserGuide/security-iam-awsmanpol.md b/IAM/latest/UserGuide/security-iam-awsmanpol.md index 84a286ad1..2751e740c 100644 --- a//IAM/latest/UserGuide/security-iam-awsmanpol.md +++ b//IAM/latest/UserGuide/security-iam-awsmanpol.md @@ -25 +25 @@ Use the `IAMUserChangePassword` managed policy to allow IAM users to change thei -You configure your IAM **Account settings** and the **Password policy** to allow IAM users to change their IAM account password. When you allow this action, IAM attaches the following policy to each user: +You configure your IAM **Account settings** and the **Password policy** to allow IAM users to change their IAM account password. When you allow this action, IAM attaches the policy to each user. @@ -27,22 +27 @@ You configure your IAM **Account settings** and the **Password policy** to allow - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "iam:ChangePassword" - ], - "Resource": [ - "arn:aws:iam::*:user/${aws:username}" - ] - }, - { - "Effect": "Allow", - "Action": [ - "iam:GetAccountPasswordPolicy" - ], - "Resource": "*" - } - ] - } +To view the JSON policy, see [IAMUserChangePassword](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/IAMUserChangePassword.html) in the AWS Managed Policy Reference Guide. @@ -466,0 +446 @@ Change | Description | Date +[IAMUserChangePassword](https://console.aws.amazon.com/iam/home#policies/IAMUserChangePassword) – Added permissions | IAM added permissions to `IAMUserChangePassword` to allow users specified within a path. | May 28, 2025