AWS IAM: Added account access manager for federated roles
Summary
Documented account access manager as an alternative to permission sets for custom IAM roles.
Security assessment
Adds security documentation for custom authorization controls in federated access scenarios.
Evidence
+[Account access manager](./account-access-manager.html) — an IAM feature — lets you assign your own custom IAM roles to IAM Identity Center users and groups, enabling capabilities like custom trust policies, role tags, and configurable role paths.
Diff
diff --git a/IAM/latest/UserGuide/id_roles_common-scenarios_federated-users.md b/IAM/latest/UserGuide/id_roles_common-scenarios_federated-users.md index 7423fb621..845357d34 100644 --- a//IAM/latest/UserGuide/id_roles_common-scenarios_federated-users.md +++ b//IAM/latest/UserGuide/id_roles_common-scenarios_federated-users.md @@ -16,0 +17,2 @@ As a security best practice, we recommend you manage user access in [IAM Identit +IAM Identity Center permission sets provision IAM role templates that IAM Identity Center manages. [Account access manager](./account-access-manager.html) — an IAM feature — lets you assign your own custom IAM roles to IAM Identity Center users and groups, enabling capabilities like custom trust policies, role tags, and configurable role paths. You can use it alongside permission sets or on its own. +