AWS IAM documentation change
Summary
Updated example values for RoleSessionName and SourceIdentity attributes to use shorter identifiers (e.g. 'john' instead of 'johndoe', 'Diego' instead of 'DiegoRamirez')
Security assessment
The changes are example value updates with no indication of addressing vulnerabilities or security features. Modifying example identifiers does not inherently relate to security issues.
Diff
diff --git a/IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.md b/IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.md index 3c2c95c90..7e5c5d798 100644 --- a//IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.md +++ b//IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.md @@ -101 +101 @@ The value of the `Name` attribute in the `Attribute` tag is case-sensitive. It m -You can use an `Attribute` element with the `Name` attribute set to `https://aws.amazon.com/SAML/Attributes/RoleSessionName`. This element contains one `AttributeValue` element that provides an identifier for the temporary credentials that are issued when the role is assumed. You can use this to associate the temporary credentials with the user who is using your application. This element is used to display user information in the AWS Management Console. The value in the `AttributeValue` element must be between 2 and 64 characters long, can contain only alphanumeric characters, underscores, and the following characters: **. , + = @ -** (hyphen). It cannot contain spaces. The value is typically a user ID (`johndoe`) or an email address (`[email protected]`). It should not be a value that includes a space, like a user's display name (`John Doe`). +You can use an `Attribute` element with the `Name` attribute set to `https://aws.amazon.com/SAML/Attributes/RoleSessionName`. This element contains one `AttributeValue` element that provides an identifier for the temporary credentials that are issued when the role is assumed. You can use this to associate the temporary credentials with the user who is using your application. This element is used to display user information in the AWS Management Console. The value in the `AttributeValue` element must be between 2 and 64 characters long, can contain only alphanumeric characters, underscores, and the following characters: **. , + = @ -** (hyphen). It cannot contain spaces. The value is typically a user ID (`john`) or an email address (`[email protected]`). It should not be a value that includes a space, like a user's display name (`John Doe`). @@ -135 +135 @@ The value of the `Name` attribute in the `Attribute` tag is case-sensitive. It m -The value in the `AttributeValue` element must be between 2 and 64 characters long, can contain only alphanumeric characters, underscores, and the following characters: **. , + = @ -** (hyphen). It cannot contain spaces. The value is typically an attribute that is associated with the user such as a user id (`johndoe`) or an email address (`[email protected]`). It should not be a value that includes a space, like a user's display name (`John Doe`). For more information about using source identity, see [Monitor and control actions taken with assumed roles](./id_credentials_temp_control-access_monitor.html). +The value in the `AttributeValue` element must be between 2 and 64 characters long, can contain only alphanumeric characters, underscores, and the following characters: **. , + = @ -** (hyphen). It cannot contain spaces. The value is typically an attribute that is associated with the user such as a user id (`john`) or an email address (`[email protected]`). It should not be a value that includes a space, like a user's display name (`John Doe`). For more information about using source identity, see [Monitor and control actions taken with assumed roles](./id_credentials_temp_control-access_monitor.html). @@ -141 +141 @@ If your SAML assertion is configured to use the SourceIdentity attribute, then y -To pass a source identity attribute, include the `AttributeValue` element that specifies the value of the source identity. For example, to pass the source identity `DiegoRamirez` use the following attribute. +To pass a source identity attribute, include the `AttributeValue` element that specifies the value of the source identity. For example, to pass the source identity `Diego` use the following attribute. @@ -145 +145 @@ To pass a source identity attribute, include the `AttributeValue` element that s - <AttributeValue>DiegoRamirez</AttributeValue> + <AttributeValue>Diego</AttributeValue>