AWS tag-editor documentation change
Summary
Updated IAM tag validation guidance and removed migration notice
Security assessment
Clarifies IAM tag handling best practices but doesn't address specific vulnerabilities
Diff
diff --git a/tag-editor/latest/userguide/tagging.md b/tag-editor/latest/userguide/tagging.md index 75fb5a7ea..8a4d3c46d 100644 --- a//tag-editor/latest/userguide/tagging.md +++ b//tag-editor/latest/userguide/tagging.md @@ -7,2 +6,0 @@ Tagging methods -AWS has moved Tag Editor tag management functionality from the AWS Resource Groups console to the AWS Resource Explorer console. With Resource Explorer, you can search and filter resources and then manage resource tags from a single console. To learn more about managing resource tags in Resource Explorer, review [Managing resources](https://docs.aws.amazon.com/resource-explorer/latest/userguide/managing-resources.html#arex_console_quickactions) in the Resource Explorer user guide. - @@ -30 +28 @@ Each tag has two parts: -Although tag keys are case sensitive, IAM has additional validations for IAM resources to prevent the application of tag keys that only differ in casing. We recommend not using keys that only differ in casing. Instead, you can use [Service Control Policies (SCPs)](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html), which provide central control over the maximum available permissions for the IAM users and IAM roles in your organization. +Although tag keys are case sensitive, IAM has additional validations for IAM resources to prevent the application of tag keys that only differ in casing. We recommend not using keys that only differ in casing. Refer to [Tags for IAM resources](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_tags.html#id_tags_rules) for more information.