AWS Security ChangesHomeSearch

AWS managedservices documentation change

Service: managedservices · 2026-05-16 · Documentation low

File: managedservices/latest/onboardingguide/create-iam-role.md

Summary

Updated image descriptions for IAM role creation process to better reflect visible UI elements like policy attachment counts and review details.

Security assessment

Changes provide clearer documentation of IAM console interface but don't modify security recommendations. External ID and MFA options remain deselected as before with no new security guidance.

Diff

diff --git a/managedservices/latest/onboardingguide/create-iam-role.md b/managedservices/latest/onboardingguide/create-iam-role.md
index f5dc27338..d11bfffe9 100644
--- a//managedservices/latest/onboardingguide/create-iam-role.md
+++ b//managedservices/latest/onboardingguide/create-iam-role.md
@@ -13 +13 @@ AWS Identity and Access Management (IAM) is a web service that helps you securel
-The Roles management page opens with information about IAM roles, a **Create role** option, and a list of existing roles.  ![IAM roles explanation with examples of trusted entities and additional resources.](/images/managedservices/latest/onboardingguide/images/iamConsoleRoles.PNG)
+The Roles management page opens with information about IAM roles, a **Create role** option, and a list of existing roles.  ![IAM Roles console page showing role creation options and a searchable list of roles.](/images/managedservices/latest/onboardingguide/images/iamConsoleRoles.PNG)
@@ -19 +19 @@ The Create role **Select type of trusted entity** page opens. Click **Another AW
-Enter the AMS trusted **Account ID** provided to you by AMS. Leave the **Require external ID** and **Require MFA** options de-selected.  ![Interface for creating a role, showing options to select trusted entity types for AWS accounts.](/images/managedservices/latest/onboardingguide/images/iamConsoleCreateRole.PNG)
+Enter the AMS trusted **Account ID** provided to you by AMS. Leave the **Require external ID** and **Require MFA** options de-selected.  ![Create role wizard showing Another AWS account option selected with account ID field.](/images/managedservices/latest/onboardingguide/images/iamConsoleCreateRole.PNG)
@@ -23 +23 @@ Enter the AMS trusted **Account ID** provided to you by AMS. Leave the **Require
-The Create role **Attach permissions policies** page opens with options for creating a new policy, refreshing the page, and searching existing policies. A list of existing policies is provided.  ![Policy list showing AdministratorAccess with full AWS service access description.](/images/managedservices/latest/onboardingguide/images/iamConsoleCreateRolePermissionsDetail.PNG)
+The Create role **Attach permissions policies** page opens with options for creating a new policy, refreshing the page, and searching existing policies. A list of existing policies is provided.  ![Policy list showing AdministratorAccess and AmazonAPIGateway policies with attachment counts.](/images/managedservices/latest/onboardingguide/images/iamConsoleCreateRolePermissionsDetail.PNG)
@@ -27 +27 @@ The Create role **Attach permissions policies** page opens with options for crea
-The Create role **Review** page opens.  ![Role creation interface showing name, description, trusted entity, and policy fields.](/images/managedservices/latest/onboardingguide/images/iamConsoleCreateRoleReview.PNG)
+The Create role **Review** page opens.  ![Review page showing role name, description, trusted entities, and policies before creation.](/images/managedservices/latest/onboardingguide/images/iamConsoleCreateRoleReview.PNG)