AWS IAM documentation change
Summary
Removed '(federation)' from a documentation link anchor text
Security assessment
Change is a minor formatting/typo correction in link text with no security implications
Diff
diff --git a/IAM/latest/UserGuide/id_federation_common_scenarios.md b/IAM/latest/UserGuide/id_federation_common_scenarios.md index 600561f73..5bdeeb4ee 100644 --- a//IAM/latest/UserGuide/id_federation_common_scenarios.md +++ b//IAM/latest/UserGuide/id_federation_common_scenarios.md @@ -97 +97 @@ If you use an OIDC identity provider from Google, Facebook, or Amazon Cognito, d - 3. In IAM, [create one or more roles](./id_roles_create_for-idp.html). For each role, define who can assume the role (the trust policy) and what permissions the app's users have (the permissions policy). Typically, you create one role for each IdP that an app supports. For example, you might create a role assumed by an app if the user signs in through Login with Amazon, a second role for the same app if the user signs in through Facebook, and a third role for the app if the user signs in through Google. For the trust relationship, specify the IdP (like Amazon.com) as the `Principal` (the trusted entity), and include a `Condition` that matches the IdP assigned app ID. Examples of roles for different providers are described in [Create a role for a third-party identity provider (federation)](./id_roles_create_for-idp.html). + 3. In IAM, [create one or more roles](./id_roles_create_for-idp.html). For each role, define who can assume the role (the trust policy) and what permissions the app's users have (the permissions policy). Typically, you create one role for each IdP that an app supports. For example, you might create a role assumed by an app if the user signs in through Login with Amazon, a second role for the same app if the user signs in through Facebook, and a third role for the app if the user signs in through Google. For the trust relationship, specify the IdP (like Amazon.com) as the `Principal` (the trusted entity), and include a `Condition` that matches the IdP assigned app ID. Examples of roles for different providers are described in [Create a role for a third-party identity provider ](./id_roles_create_for-idp.html).