AWS controltower: Fix URL in role trust policy recommendation
Summary
Corrected a hyperlink URL by removing extra slashes.
Security assessment
The change only fixes a broken link; the security guidance about restricting role access remains unchanged.
Evidence
+You can impose conditions in your role trust policies, to restrict the accounts and resources that interact with certain roles in AWS Control Tower. We strongly recommend that you restrict access to the `AWSControlTowerAdmin` role, because it allows wide access permissions. for more information, see [Optional conditions for your role trust relationships](https://docs.aws.amazon.com/controltower/latest/userguide/conditions-for-role-trust.html).
Diff
diff --git a/controltower/latest/userguide/roles-recommendations.md b/controltower/latest/userguide/roles-recommendations.md index ffab99c62..9329954d0 100644 --- a//controltower/latest/userguide/roles-recommendations.md +++ b//controltower/latest/userguide/roles-recommendations.md @@ -19 +19 @@ When you're setting up the shared audit account in your landing zone, we recomme -You can impose conditions in your role trust policies, to restrict the accounts and resources that interact with certain roles in AWS Control Tower. We strongly recommend that you restrict access to the `AWSControlTowerAdmin` role, because it allows wide access permissions. for more information, see [Optional conditions for your role trust relationships](https://docs.aws.amazon.com//controltower/latest/userguide/conditions-for-role-trust.html). +You can impose conditions in your role trust policies, to restrict the accounts and resources that interact with certain roles in AWS Control Tower. We strongly recommend that you restrict access to the `AWSControlTowerAdmin` role, because it allows wide access permissions. for more information, see [Optional conditions for your role trust relationships](https://docs.aws.amazon.com/controltower/latest/userguide/conditions-for-role-trust.html).