AWS IAM documentation change

Service: IAM · 2025-11-22 · Documentation low

File: IAM/latest/UserGuide/id_users.md

Summary

Added documentation about IAM users using console credentials for AWS CLI/SDK access via 'aws login'

Security assessment

The change clarifies authentication methods for IAM users, including permissions required for CLI/SDK access. While this adds security-related documentation about credential usage, there is no evidence of addressing a specific security vulnerability.

Diff

diff --git a/IAM/latest/UserGuide/id_users.md b/IAM/latest/UserGuide/id_users.md
index f653dcf9b..1f203d870 100644
--- a//IAM/latest/UserGuide/id_users.md
+++ b//IAM/latest/UserGuide/id_users.md
@@ -38 +38 @@ You can access AWS in different ways depending on the IAM user credentials:
-  * [Console password](./id_credentials_passwords.html): A password that the IAM user can type to sign in to interactive sessions such as the AWS Management Console. Disabling the password (console access) for an IAM user prevents them from signing in to the AWS Management Console using their sign-in credentials. It does not change their permissions or prevent them from accessing the console using an assumed role.
+  * [Console password](./id_credentials_passwords.html): A password that the IAM user can type to sign in to interactive sessions such as the AWS Management Console. Disabling the password (console access) for an IAM user prevents them from signing in to the AWS Management Console using their sign-in credentials. It does not change their permissions or prevent them from accessing the console using an assumed role. IAM users with console access enabled can also use these same credentials to authenticate for AWS CLI and SDK access using the `aws login` AWS CLI command. These users will need to have [SignInLocalDevelopmentAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/SignInLocalDevelopmentAccess.html) permissions. See [Authentication and access credentials for the AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-authentication.html) in the _AWS Command Line Interface User Guide_ for more details.