AWS wickr documentation change
Summary
Simplified temporary credentials explanation, removed examples of temporary credential creation, and emphasized dynamic generation over long-term keys.
Security assessment
The update reinforces security best practices (using temporary credentials) but does not fix a specific security issue. It enhances documentation about existing security features without introducing new vulnerabilities.
Diff
diff --git a/wickr/latest/adminguide-classic/security_iam_service-with-iam.md b/wickr/latest/adminguide-classic/security_iam_service-with-iam.md index dbee6da8e..a0a29d0d0 100644 --- a//wickr/latest/adminguide-classic/security_iam_service-with-iam.md +++ b//wickr/latest/adminguide-classic/security_iam_service-with-iam.md @@ -33,5 +33 @@ To get a high-level view of how Wickr and other AWS services work with most IAM -Some AWS services don't work when you sign in using temporary credentials. For additional information, including which AWS services work with temporary credentials, see [AWS services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) in the _IAM User Guide_. - -You are using temporary credentials if you sign in to the AWS Management Console using any method except a user name and password. For example, when you access AWS using your company's single sign-on (SSO) link, that process automatically creates temporary credentials. You also automatically create temporary credentials when you sign in to the console as a user and then switch roles. For more information about switching roles, see [Switch from a user to an IAM role (console)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-console.html) in the _IAM User Guide_. - -You can manually create temporary credentials using the AWS CLI or AWS API. You can then use those temporary credentials to access AWS. AWS recommends that you dynamically generate temporary credentials instead of using long-term access keys. For more information, see [Temporary security credentials in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html). +Temporary credentials provide short-term access to AWS resources and are automatically created when you use federation or switch roles. AWS recommends that you dynamically generate temporary credentials instead of using long-term access keys. For more information, see [Temporary security credentials in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html) and [AWS services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) in the _IAM User Guide_.