AWS Security ChangesHomeSearch

AWS singlesignon documentation change

Service: singlesignon · 2025-05-31 · Documentation low

File: singlesignon/latest/IdentityStoreAPIReference/API_DescribeUser.md

Summary

Added examples section with sample request/response for DescribeUser API operation and removed note about member account access

Security assessment

Change adds usage examples but removes security-related note about member account access limitations. No direct evidence of addressing a vulnerability.

Diff

diff --git a/singlesignon/latest/IdentityStoreAPIReference/API_DescribeUser.md b/singlesignon/latest/IdentityStoreAPIReference/API_DescribeUser.md
index fcd8e3990..cef7376ab 100644
--- a//singlesignon/latest/IdentityStoreAPIReference/API_DescribeUser.md
+++ b//singlesignon/latest/IdentityStoreAPIReference/API_DescribeUser.md
@@ -5 +5 @@
-Request SyntaxRequest ParametersResponse SyntaxResponse ElementsErrorsSee Also
+Request SyntaxRequest ParametersResponse SyntaxResponse ElementsErrorsExamplesSee Also
@@ -9,6 +8,0 @@ Request SyntaxRequest ParametersResponse SyntaxResponse ElementsErrorsSee Also
-Retrieves the user metadata and attributes from the `UserId` in an identity store.
-
-###### Note
-
-If you have access to a member account, you can use this API operation from the member account. For more information, see [Limiting access to the identity store from member accounts](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts) in the _AWS IAM Identity Center User Guide_.
-
@@ -320,0 +315,55 @@ HTTP Status Code: 400
+## Examples
+
+### Example
+
+This example retrieves information about a user called John Doe.
+
+#### Sample Request
+    
+    
+    {
+        "IdentityStoreId": "d-1234567890",
+        "UserId": "1a2b3c4d-5e6f-7g8h-9i0j-1k2l3m4n5o6p"
+    }
+    
+
+#### Sample Response
+    
+    
+     {
+        "UserName": "johndoe",
+        "UserId": "1a2b3c4d-5e6f-7g8h-9i0j-1k2l3m4n5o6p",
+        "Name": {
+            "Formatted": "John Doe",
+            "FamilyName": "Doe",
+            "GivenName": "John",
+        },
+        "DisplayName": "John Doe",
+        "Emails": [
+            {
+                "Value": "[email protected]",
+                "Type": "work",
+                "Primary": true
+            }
+        ],
+        "Addresses": [
+            {
+                "StreetAddress": "123 Main St",
+                "Locality": "Any Town",
+                "Region": "ST",
+                "PostalCode": "12345",
+                "Country": "USA",
+                "Formatted": "123 Main St, Anytown, ST 12345, USA",
+                "Type": "home"
+            }
+        ],
+        "PhoneNumbers": [
+            {
+                "Value": "+1 (832) 555-0100",
+                "Type": "work",
+                "Primary": true
+            }
+        ],
+        "IdentityStoreId": "d-1234567890"
+    }
+