AWS codeguru medium security documentation change
Summary
Removed root user security best practices section and changed heading from 'Sign up for AWS' to 'Setting up'.
Security assessment
Deletion of critical security guidance about root user risks and least privilege principles. This removal could lead to insecure account practices if users aren't warned about root user dangers.
Diff
diff --git a/codeguru/latest/reviewer-ug/get-set-up-configure-iam-permissions.md b/codeguru/latest/reviewer-ug/get-set-up-configure-iam-permissions.md index 11c07edce..346d660f5 100644 --- a//codeguru/latest/reviewer-ug/get-set-up-configure-iam-permissions.md +++ b//codeguru/latest/reviewer-ug/get-set-up-configure-iam-permissions.md @@ -11,4 +10,0 @@ As of November 7, 2025, you can't create new repository associations in Amazon C -When you create an AWS account, you get a single sign-in identity that has complete access to all of the AWS services and resources in the account. This identity is called the AWS account _root user_. Signing in to the AWS console using the email address and password that you used to create the account gives you complete access to all of the AWS resources in your account. - -We strongly recommend that you _not_ use the root user for everyday tasks, even the administrative ones. Instead, create an administrative user with the least privileges needed. Then securely lock away the root user credentials and use them to perform only a few account and service management tasks. For more information, see [Security best practices in IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html) in the _IAM User Guide_. - @@ -32 +28 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Sign up for AWS +Setting up