AWS Security ChangesHomeSearch

AWS IAM documentation change

Service: IAM · 2025-06-13 · Documentation low

File: IAM/latest/UserGuide/security-creds.md

Summary

Updated references from 'federated users' to 'federated principals' and 'AWS STS federated user principals' in credential type descriptions and security recommendations.

Security assessment

The modifications are purely terminological updates to maintain consistency across documentation. No security vulnerabilities are mentioned or addressed in these changes.

Diff

diff --git a/IAM/latest/UserGuide/security-creds.md b/IAM/latest/UserGuide/security-creds.md
index cddfa14c0..e035e452b 100644
--- a//IAM/latest/UserGuide/security-creds.md
+++ b//IAM/latest/UserGuide/security-creds.md
@@ -19 +19 @@ There are different types of users in AWS, each with their own security credenti
-  * **Federated users** — Users from external identity providers who are granted temporary access to AWS through federation. For more information about federated identities, see [Identity providers and federation](./id_roles_providers.html).
+  * **Federated principals** — Users from external identity providers who are granted temporary access to AWS through federation. For more information about federated identities, see [Identity providers and federation](./id_roles_providers.html).
@@ -30 +30 @@ To simplify managing root user credentials across member accounts in AWS Organiz
-IAM roles, users in AWS IAM Identity Center, and federated users have temporary security credentials. Temporary security credentials expire after a defined period of time or when the user ends their session. Temporary credentials work almost identically to long-term credentials, with the following differences:
+IAM roles, users in AWS IAM Identity Center, and AWS STS federated user principals have temporary security credentials. Temporary security credentials expire after a defined period of time or when the user ends their session. Temporary credentials work almost identically to long-term credentials, with the following differences:
@@ -74 +74 @@ We recommend that you consider the following information when determining the se
-  * We strongly recommend that you use temporary credentials provided by IAM roles and federated users instead of the long-term credentials provided by IAM users and access keys.
+  * We strongly recommend that you use temporary credentials provided by IAM roles and federated principals instead of the long-term credentials provided by IAM users and access keys.