1 個回答
- 最新
- 最多得票
- 最多評論
1
I recommend using IAM users for the following reasons.
re:Post User is linked to the IAM credentials; for AWS SSO users, it is the IAM role provisioned to the account.
For example, if the Permission Set is reassigned, the IAM roles provisioned to the account will change from AWSReservedSSO_AdministratorAccess_xxxxxxxxxxxxxxxxxxx
to AWSReservedSSO_AdministratorAccess_yyyyyyyyyyyyyyy
.
As a result, the previous re:Post user will no longer be able to log in.
I had the same event and contacted support.
The same event would occur if the IAM user were re-created, but I chose to use the IAM user as it is less risky.
已回答 2 年前
相關內容
- AWS 官方已更新 1 年前
- AWS 官方已更新 2 年前
Thank you! :) I can't mark this as the correct answer because I lost my user... I really hope AWS will fix this because it makes it quite painful to be helpful.