AWS IAM: Added documentation for IAM account access manager feature
Summary
Added details about account access manager, enabling assignment of IAM roles to IAM Identity Center users/groups.
Security assessment
Documents a new IAM feature for role assignment, enhancing access control capabilities without addressing a specific vulnerability.
Evidence
You can also use [account access manager](./account-access-manager.html) — an IAM feature that lets you assign existing IAM roles you create and manage to IAM Identity Center users and groups, giving you access to the full IAM role feature set. You can use it alongside permission sets or on its own.
Diff
diff --git a/IAM/latest/UserGuide/when-to-use-iam.md b/IAM/latest/UserGuide/when-to-use-iam.md index 548a84625..38ab7bf43 100644 --- a//IAM/latest/UserGuide/when-to-use-iam.md +++ b//IAM/latest/UserGuide/when-to-use-iam.md @@ -66,0 +67,2 @@ If you are using IAM Identity Center to manage your users, you assign permission +You can also use [account access manager](./account-access-manager.html) — an IAM feature that lets you assign existing IAM roles you create and manage to IAM Identity Center users and groups, giving you access to the full IAM role feature set. You can use it alongside permission sets or on its own. +