1 回答
- 最新
- 投票最多
- 评论最多
1
I recommend using IAM users for the following reasons.
re:Post User is linked to the IAM credentials; for AWS SSO users, it is the IAM role provisioned to the account.
For example, if the Permission Set is reassigned, the IAM roles provisioned to the account will change from AWSReservedSSO_AdministratorAccess_xxxxxxxxxxxxxxxxxxx to AWSReservedSSO_AdministratorAccess_yyyyyyyyyyyyyyy.
As a result, the previous re:Post user will no longer be able to log in.
I had the same event and contacted support.
The same event would occur if the IAM user were re-created, but I chose to use the IAM user as it is less risky.
已回答 2 年前
Thank you! :) I can't mark this as the correct answer because I lost my user... I really hope AWS will fix this because it makes it quite painful to be helpful.