AWS singlesignon: Add account access manager integration details
Summary
Documented account access manager for IAM role assignments to Identity Center users.
Security assessment
Documents security feature for managing IAM role assignments through Identity Center.
Evidence
+You can also use [account access manager](https://docs.aws.amazon.com/IAM/latest/UserGuide/account-access-manager.html) — an IAM feature — to assign existing IAM roles to IAM Identity Center users and groups in your organization's accounts.
Diff
diff --git a/singlesignon/latest/userguide/manage-your-accounts.md b/singlesignon/latest/userguide/manage-your-accounts.md index 4d87059ad..5261ed10e 100644 --- a//singlesignon/latest/userguide/manage-your-accounts.md +++ b//singlesignon/latest/userguide/manage-your-accounts.md @@ -52,0 +53,2 @@ You can use _permission sets_ to simplify how you assign users and groups in you +You can also use [account access manager](https://docs.aws.amazon.com/IAM/latest/UserGuide/account-access-manager.html) — an IAM feature — to assign existing IAM roles to IAM Identity Center users and groups in your organization's accounts. You can use account access manager on its own, or together with permission sets. Account access manager gives you access to the full IAM role feature set, including custom trust policies, role tags for ABAC, and configurable role paths. +