AWS config medium security documentation change
Summary
Clarified rule compliance condition for IAM users with attached policies
Security assessment
Improves clarity on security best practice enforcement (policy inheritance through groups/roles), though not addressing a specific new vulnerability
Diff
diff --git a/config/latest/developerguide/iam-user-no-policies-check.md b/config/latest/developerguide/iam-user-no-policies-check.md index 381f12fc4..3c2852f0f 100644 --- a//config/latest/developerguide/iam-user-no-policies-check.md +++ b//config/latest/developerguide/iam-user-no-policies-check.md @@ -9 +9 @@ AWS CloudFormation template -Checks if none of your AWS Identity and Access Management (IAM) users have policies attached. IAM users must inherit permissions from IAM groups or roles. The rule is NON_COMPLIANT if there is at least one policy that is attached to the IAM user. +Checks if none of your AWS Identity and Access Management (IAM) users have policies attached. IAM users must inherit permissions from IAM groups or roles. The rule is NON_COMPLIANT if there is at least one IAM user with policies attached.