AWS IAM: User creation note: console-access IAM users unavailable in new experience
Summary
Adds the same note to the create-IAM-user topic stating that in the new AWS experience you cannot create IAM users with console access and should invite team members instead.
Security assessment
In the page that documents creating IAM users, the added note directs console access to the invite/team flow rather than static IAM user credentials, reinforcing reduced reliance on long-lived user sign-in credentials.
Evidence
+If you're using our [new AWS experience](https://docs.aws.amazon.com/accounts/latest/reference/sign-in-new.html) and want to provide human users with access to your projects or AWS Settings, you must add them to your team. In our new experience, you cannot create IAM users with console access. For more information, see [Invite team members](https://docs.aws.amazon.com/accounts/latest/reference/invite-team-members.html).
Diff
diff --git a/IAM/latest/UserGuide/id_users_create.md b/IAM/latest/UserGuide/id_users_create.md index 2e5193fa2..1db785085 100644 --- a//IAM/latest/UserGuide/id_users_create.md +++ b//IAM/latest/UserGuide/id_users_create.md @@ -12,0 +13,2 @@ IAM [best practices](./best-practices.html) recommend that you require human use +If you're using our [new AWS experience](https://docs.aws.amazon.com/accounts/latest/reference/sign-in-new.html) and want to provide human users with access to your projects or AWS Settings, you must add them to your team. In our new experience, you cannot create IAM users with console access. For more information, see [Invite team members](https://docs.aws.amazon.com/accounts/latest/reference/invite-team-members.html). +