mirror of
https://github.com/hashicorp/vault.git
synced 2025-11-21 18:51:41 +01:00
783d11d573
* Add specification about AWS IAM Unique Identifiers We experienced an issue where IAM roles resources were re-provisioned with the same ARNs and no change had been made to our vault role configuration but users lost access with `-method=aws`. It wasn't immediately clear to us how IAM Unique Identifiers where being used to avoid the same situations outlined in the AWS documentation. We eventually concluded that re-provisioning the roles in our auth/aws/auth would fetch the new IAM Unique Identifiers. I hope that this small amendment helps people avoid this problem in the future.