AWS Security ChangesHomeSearch

AWS IAM documentation change

Service: IAM · 2025-06-25 · Documentation low

File: IAM/latest/UserGuide/iam_example_iam_UploadSigningCertificate_section.md

Summary

Added PowerShell V5 example for uploading X.509 signing certificates with MFA user association

Security assessment

While demonstrating certificate management with user association, it documents security-related credential management practices but does not address a specific vulnerability.

Diff

diff --git a/IAM/latest/UserGuide/iam_example_iam_UploadSigningCertificate_section.md b/IAM/latest/UserGuide/iam_example_iam_UploadSigningCertificate_section.md
index 3edaa6259..a6b71be28 100644
--- a//IAM/latest/UserGuide/iam_example_iam_UploadSigningCertificate_section.md
+++ b//IAM/latest/UserGuide/iam_example_iam_UploadSigningCertificate_section.md
@@ -87,0 +88,38 @@ PowerShell
+**Tools for PowerShell V5**
+    
+
+**Example 1: This example uploads a new X.509 signing certificate and associates it with the IAM user named`Bob`. The file containing the certificate body is PEM encoded. The `CertificateBody` parameter requires the actual contents of the certificate file rather than the file name. You must use the `-Raw` switch parameter to successfully process the file.**
+    
+    
+    Publish-IAMSigningCertificate -UserName Bob -CertificateBody (Get-Content -Raw SampleSigningCert.pem)
+    
+
+**Output:**
+    
+    
+    CertificateBody : -----BEGIN CERTIFICATE-----
+                      MIICiTCCAfICCQD6m7oRw0uXOjANBgkqhkiG9w0BAQUFADCBiDELMAkGA1UEBhMC
+                      VVMxCzAJBgNVBAgTAldBMRAwDgYDVQQHEwdTZWF0dGxlMQ8wDQYDVQQKEwZBbWF6
+                      b24xFDASBgNVBAsTC0lBTSBDb25zb2xlMRIwEAYDVQQDEwlUZXN0Q2lsYWMxHzAd
+                      BgkqhkiG9w0BCQEWEG5vb25lQGFtYXpvbi5jb20wHhcNMTEwNDI1MjA0NTIxWhcN
+                      MTIwNDI0MjA0NTIxWjCBiDELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAldBMRAwDgYD
+                      VQQHEwdTZWF0dGxlMQ8wDQYDVQQKEwZBbWF6b24xFDASBgNVBAsTC0lBTSBDb25z
+                      b2xlMRIwEAYDVQQDEwlUZXN0Q2lsYWMxHzAdBgkqhkiG9w0BCQEWEG5vb25lQGFt
+                      YXpvbi5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMaK0dn+a4GmWIWJ
+                      21uUSfwfEvySWtC2XADZ4nB+BLYgVIk60CpiwsZ3G93vUEIO3IyNoH/f0wYK8m9T
+                      rDHudUZg3qX4waLG5M43q7Wgc/MbQITxOUSQv7c7ugFFDzQGBzZswY6786m86gpE
+                      Ibb3OhjZnzcvQAaRHhdlQWIMm2nrAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAtCu4
+                      nUhVVxYUntneD9+h8Mg9q6q+auNKyExzyLwaxlAoo7TJHidbtS4J5iNmZgXL0Fkb
+                      FFBjvSfpJIlJ00zbhNYS5f6GuoEDmFJl0ZxBHjJnyp378OD8uTs7fLvjx79LjSTb
+                      NYiytVbZPQUQ5Yaxu2jXnimvw3rrszlaEXAMPLE=
+                      -----END CERTIFICATE-----
+    CertificateId   : Y3EK7RMEXAMPLESV33FCEXAMPLEHMJLU
+    Status          : Active
+    UploadDate      : 4/20/2015 1:26:01 PM
+    UserName        : Bob
+
+  * For API details, see [UploadSigningCertificate](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. 
+
+
+
+