AWS IAM documentation change
Summary
Fixed a typo: changed 'give' to 'gives' in a sentence about group recreation and policy persistence.
Security assessment
This is a minor grammatical correction. The change does not introduce new security information or address a specific vulnerability. It clarifies existing documentation about the potential for unintended permissions if a group is recreated with the same name, but this is a known behavior, not a new security issue.
Diff
diff --git a/IAM/latest/UserGuide/id_groups_manage_delete.md b/IAM/latest/UserGuide/id_groups_manage_delete.md index c01a52f4a..f581a7a8b 100644 --- a//IAM/latest/UserGuide/id_groups_manage_delete.md +++ b//IAM/latest/UserGuide/id_groups_manage_delete.md @@ -9 +9 @@ -When you delete an IAM group in the console, the console automatically removes all group members, detaches all attached managed policies, and deletes all inline policies. However, because IAM doesn't automatically delete policies that refer to the IAM group as a resource, you must be careful when you delete an IAM group. Before you delete your IAM group, manually review your policies to find any policies that mention the group by name. For example, John, the Test Team manager, has a policy attached to his IAM user entity that lets him add and remove users from the Test user group. If an administrator deletes the group, the administrator must also delete the policy attached to John. Otherwise, if the administrator recreates the deleted group and give it the same name, John's permissions remain in place, even if he left the Test Team. +When you delete an IAM group in the console, the console automatically removes all group members, detaches all attached managed policies, and deletes all inline policies. However, because IAM doesn't automatically delete policies that refer to the IAM group as a resource, you must be careful when you delete an IAM group. Before you delete your IAM group, manually review your policies to find any policies that mention the group by name. For example, John, the Test Team manager, has a policy attached to his IAM user entity that lets him add and remove users from the Test user group. If an administrator deletes the group, the administrator must also delete the policy attached to John. Otherwise, if the administrator recreates the deleted group and gives it the same name, John's permissions remain in place, even if he left the Test Team.