AWS IAM: Fix broken URLs in identity provider documentation
Summary
Corrected multiple URLs for IAM Identity Center and OpenID Connect/SAML references.
Security assessment
The change fixes broken hyperlinks but does not address vulnerabilities or add security guidance.
Evidence
+You can also manage human users in [IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) with an external SAML identity provider instead of using SAML federation in IAM.
Diff
diff --git a/IAM/latest/UserGuide/id_roles_providers.md b/IAM/latest/UserGuide/id_roles_providers.md index a1d512ec3..99e29399f 100644 --- a//IAM/latest/UserGuide/id_roles_providers.md +++ b//IAM/latest/UserGuide/id_roles_providers.md @@ -15 +15 @@ As a best practice, we recommend that you require human users to use federation -You can also manage human users in [IAM Identity Center](https://docs.aws.amazon.com//singlesignon/latest/userguide/what-is.html) with an external SAML identity provider instead of using SAML federation in IAM. IAM Identity Center federation with an identity provider provides the capability for you to give people access to multiple AWS accounts in your organization and to multiple AWS applications. For information about specific situations where an IAM user is required, see [When to create an IAM user (instead of a role)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id.html#id_which-to-choose). +You can also manage human users in [IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html) with an external SAML identity provider instead of using SAML federation in IAM. IAM Identity Center federation with an identity provider provides the capability for you to give people access to multiple AWS accounts in your organization and to multiple AWS applications. For information about specific situations where an IAM user is required, see [When to create an IAM user (instead of a role)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id.html#id_which-to-choose). @@ -19 +19 @@ You can also use [account access manager](./account-access-manager.html) — an -If you prefer to use a single AWS account without enabling IAM Identity Center, you can use IAM with an external IdP that provides identity information to AWS using either [OpenID Connect (OIDC)](https://docs.aws.amazon.com/http://openid.net/connect/) or [SAML 2.0 (Security Assertion Markup Language 2.0)](https://wiki.oasis-open.org/security). OIDC connects applications, like GitHub Actions, that do not run on AWS to AWS resources. Examples of well-known SAML identity providers are Shibboleth and Active Directory Federation Services. +If you prefer to use a single AWS account without enabling IAM Identity Center, you can use IAM with an external IdP that provides identity information to AWS using either [OpenID Connect (OIDC)](http://openid.net/connect/) or [SAML 2.0 (Security Assertion Markup Language 2.0)](https://wiki.oasis-open.org/security). OIDC connects applications, like GitHub Actions, that do not run on AWS to AWS resources. Examples of well-known SAML identity providers are Shibboleth and Active Directory Federation Services. @@ -67 +67 @@ You can also manage machine identities for external parties who need access. To -To link an IdP directly to IAM, you create an identity provider entity to establish a trust relationship between your AWS account and the IdP. IAM supports IdPs that are compatible with [OpenID Connect (OIDC)](https://docs.aws.amazon.com/http://openid.net/connect/) or [SAML 2.0 (Security Assertion Markup Language 2.0)](https://wiki.oasis-open.org/security). For more information about using one of these IdPs with AWS, see the following sections: +To link an IdP directly to IAM, you create an identity provider entity to establish a trust relationship between your AWS account and the IdP. IAM supports IdPs that are compatible with [OpenID Connect (OIDC)](http://openid.net/connect/) or [SAML 2.0 (Security Assertion Markup Language 2.0)](https://wiki.oasis-open.org/security). For more information about using one of these IdPs with AWS, see the following sections: