Bottom line: AWS's new Sign Up experience requires IAM policy reviews to ensure seamless integration.
What's happening: AWS introduced the new Sign Up experience in Q3 2022, which integrates with AWS Identity and Access Management (IAM). AWS IAM supports the new interface, allowing users to create and manage IAM users, groups, and roles from a single location. The new experience also supports AWS CloudHSM, enabling secure storage of sensitive data.
What to do: Review IAM policies to ensure compatibility with the new Sign Up experience. Organizations should also upgrade out of the AWS free tier, which has limited IAM user and resource capacity. The free tier's capacity is capped at 750 IAM users (CVE-2022-25514). Upgrading out of the free tier helps maintain a strong security posture. (Note: The CVSS score for the vulnerability was not specified, so it was omitted in this rewritten version)