AWS IAM: Introduced account access manager for role delegation
Summary
Added documentation for account access manager to centrally assign IAM roles across accounts.
Security assessment
Documents a security feature enabling centralized authorization controls through IAM roles.
Evidence
+[Account access manager](./account-access-manager.html) is an IAM feature that lets you centrally assign IAM roles across your organization's accounts to [IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) users and groups.
Diff
diff --git a/IAM/latest/UserGuide/id_roles.md b/IAM/latest/UserGuide/id_roles.md index c368adeec..5a1362575 100644 --- a//IAM/latest/UserGuide/id_roles.md +++ b//IAM/latest/UserGuide/id_roles.md @@ -16,0 +17,2 @@ For these scenarios, you can delegate access to AWS resources using an _IAM role +[Account access manager](./account-access-manager.html) is an IAM feature that lets you centrally assign IAM roles across your organization's accounts to [IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) users and groups. Account access manager gives your workforce access through IAM roles with their full feature set. You can use it alongside IAM Identity Center permission sets or on its own. +