AWS Security ChangesHomeSearch

AWS controltower: Fix typo 'root user user' in IAM Identity Center setup text

Service: controltower · 2026-09-27 · Documentation low

File: controltower/latest/userguide/sso.md

Summary

Corrected a duplicated word ('root user user' to 'root user') in the paragraph describing who can add IAM Identity Center users during initial AWS Control Tower setup.

Security assessment

The only change is a grammatical typo fix ('user user' to 'user'); the surrounding IAM Identity Center permission statement is unchanged, so there is no security impact.

Evidence

-When you initially set up AWS Control Tower, only the root user user and any IAM users with the correct permissions can add IAM Identity Center users. However, after end users have been added in the **AWSAccountFactory** group, they can create new IAM Identity Center users from the Account Factory wizard. For more information, see [Provision and manage accounts with Account Factory](./account-factory.html).

Diff

diff --git a/controltower/latest/userguide/sso.md b/controltower/latest/userguide/sso.md
index 1a0fec328..c770a18bd 100644
--- a//controltower/latest/userguide/sso.md
+++ b//controltower/latest/userguide/sso.md
@@ -19 +19 @@ For a brief tutorial about how to set up your IAM Identity Center users and perm
-When you initially set up AWS Control Tower, only the root user user and any IAM users with the correct permissions can add IAM Identity Center users. However, after end users have been added in the **AWSAccountFactory** group, they can create new IAM Identity Center users from the Account Factory wizard. For more information, see [Provision and manage accounts with Account Factory](./account-factory.html).
+When you initially set up AWS Control Tower, only the root user and any IAM users with the correct permissions can add IAM Identity Center users. However, after end users have been added in the **AWSAccountFactory** group, they can create new IAM Identity Center users from the Account Factory wizard. For more information, see [Provision and manage accounts with Account Factory](./account-factory.html).