AWS organizations medium security documentation change

Service: organizations · 2025-08-10 · Security-related medium

File: organizations/latest/userguide/best-practices_member-acct.md

Summary

Changed IAM condition operator from StringLike to ArnLike for principal ARN matching

Security assessment

Corrected IAM policy syntax to use ArnLike operator for ARN comparisons, ensuring proper policy evaluation.

Diff

diff --git a/organizations/latest/userguide/best-practices_member-acct.md b/organizations/latest/userguide/best-practices_member-acct.md
index e6586b6d2..472b12ddd 100644
--- a//organizations/latest/userguide/best-practices_member-acct.md
+++ b//organizations/latest/userguide/best-practices_member-acct.md
@@ -88,2 +78 @@ JSON
-     "StringLike": { "aws:PrincipalArn": "arn:aws:iam::*:root" }
-    
+     "ArnLike": { "aws:PrincipalArn": "arn:aws:iam::*:root" }