AWS awsaccountbilling documentation change
Summary
Simplified explanation about AWS root user access, removed specific safeguarding recommendations for root user credentials
Security assessment
The change removes explicit guidance about safeguarding root user credentials but maintains the core recommendation to avoid using root user for daily tasks. While security best practices are slightly reduced, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/awsaccountbilling/latest/aboutv2/control-access-billing.md b/awsaccountbilling/latest/aboutv2/control-access-billing.md index 5ec78cadb..d46b6283f 100644 --- a//awsaccountbilling/latest/aboutv2/control-access-billing.md +++ b//awsaccountbilling/latest/aboutv2/control-access-billing.md @@ -13 +13 @@ By default, IAM users don't have access to the [AWS Billing and Cost Management -When you create an AWS account, you begin with one sign-in identity that has complete access to all AWS services and resources in the account. This identity is called the AWS account _root user_ and is accessed by signing in with the email address and password that you used to create the account. We strongly recommend that you don't use the root user for your everyday tasks. Safeguard your root user credentials and use them to perform the tasks that only the root user can perform. For the complete list of tasks that require you to sign in as the root user, see [Tasks that require root user credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#root-user-tasks) in the _IAM User Guide_. +When you create an AWS account, you begin with one sign-in identity called the AWS account _root user_ that has complete access to all AWS services and resources. We strongly recommend that you don't use the root user for everyday tasks. For tasks that require root user credentials, see [Tasks that require root user credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_root-user.html#root-user-tasks) in the _IAM User Guide_.