AWS IAM: Fix least privilege principle link
Summary
Updated Wikipedia URL reference for principle of least privilege.
Security assessment
Corrects an external link; security best practice content remains identical.
Evidence
+If `Resource` is set to `*`, the user can assume any role in any account that trusts the user's account. (In other words, the role's trust policy specifies the user's account as `Principal`). As a best practice, we recommend that you follow the [principle of least privilege](http://en.wikipedia.org/wiki/Principle_of_least_privilege) and specify the complete ARN for only the roles that the user needs.
Diff
diff --git a/IAM/latest/UserGuide/id_roles_use_permissions-to-switch.md b/IAM/latest/UserGuide/id_roles_use_permissions-to-switch.md index c7025b82b..f446a05a7 100644 --- a//IAM/latest/UserGuide/id_roles_use_permissions-to-switch.md +++ b//IAM/latest/UserGuide/id_roles_use_permissions-to-switch.md @@ -67 +67 @@ Users that get the policy are allowed to switch roles on the resource listed (ei -If `Resource` is set to `*`, the user can assume any role in any account that trusts the user's account. (In other words, the role's trust policy specifies the user's account as `Principal`). As a best practice, we recommend that you follow the [principle of least privilege](https://docs.aws.amazon.com/http://en.wikipedia.org/wiki/Principle_of_least_privilege) and specify the complete ARN for only the roles that the user needs. +If `Resource` is set to `*`, the user can assume any role in any account that trusts the user's account. (In other words, the role's trust policy specifies the user's account as `Principal`). As a best practice, we recommend that you follow the [principle of least privilege](http://en.wikipedia.org/wiki/Principle_of_least_privilege) and specify the complete ARN for only the roles that the user needs.