AWS Security ChangesHomeSearch

AWS IAM medium security documentation change

Service: IAM · 2026-05-01 · Security-related medium

File: IAM/latest/UserGuide/id_roles_create_for-idp.md

Summary

Corrected tagging target from 'user' to 'role' and updated documentation links

Security assessment

Misattributing tags to users instead of roles could lead to incorrect access control. Fixing this prevents potential misconfiguration of role-based attributes and permissions.

Diff

diff --git a/IAM/latest/UserGuide/id_roles_create_for-idp.md b/IAM/latest/UserGuide/id_roles_create_for-idp.md
index a8a49d479..9ff453ffa 100644
--- a//IAM/latest/UserGuide/id_roles_create_for-idp.md
+++ b//IAM/latest/UserGuide/id_roles_create_for-idp.md
@@ -134 +134 @@ Create an inline permissions policy for the role: [PutRolePolicy](https://docs.a
-  3. (Optional) Add custom attributes to the user by attaching tags: [TagRole](https://docs.aws.amazon.com/IAM/latest/APIReference/API_TagRole.html)
+  3. (Optional) Add custom attributes to the role by attaching tags: [TagRole](https://docs.aws.amazon.com/IAM/latest/APIReference/API_TagRole.html)
@@ -136 +136 @@ Create an inline permissions policy for the role: [PutRolePolicy](https://docs.a
-For more information, see [Managing tags on IAM users (AWS CLI or AWS API)](./id_tags_users.html#id_tags_users_procs-cli-api).
+For more information, see [Managing tags on IAM roles (AWS CLI or AWS API)](./id_tags_roles.html#id_tags_roles_procs-cli-api).