AWS IAM: Added account access manager for IAM roles
Summary
Documentation added for using account access manager to assign IAM roles to IAM Identity Center users/groups.
Security assessment
Introduces a security feature for centralized IAM role management, improving authorization controls.
Evidence
+You can use [account access manager](./account-access-manager.html) — an IAM feature that lets you assign existing IAM roles across your organization's accounts to IAM Identity Center users and groups.
Diff
diff --git a/IAM/latest/UserGuide/best-practices.md b/IAM/latest/UserGuide/best-practices.md index 6c85b1afb..0c4694227 100644 --- a//IAM/latest/UserGuide/best-practices.md +++ b//IAM/latest/UserGuide/best-practices.md @@ -53,0 +54,2 @@ Require your human users to use temporary credentials when accessing AWS. You ca +You can use [account access manager](./account-access-manager.html) — an IAM feature that lets you assign existing IAM roles across your organization's accounts to IAM Identity Center users and groups. Account access manager gives you access to the full IAM role feature set, including custom trust policies, role tags for ABAC, and configurable role paths. You can use it alongside permission sets or on its own. +