AWS singlesignon documentation change

Service: singlesignon · 2025-08-13 · Documentation low

File: singlesignon/latest/userguide/awsapps-that-work-with-identity-center.md

Summary

Updated the table of AWS managed applications integrating with IAM Identity Center, removed organization instance column (now implied for all), added details on trusted identity propagation support for various services including Amazon SageMaker Unified Studio and Amazon Q Business

Security assessment

The changes primarily update feature compatibility documentation. While trusted identity propagation is a security-related feature, there is no evidence this change addresses a specific vulnerability. The update adds clarity about which services support security features like trusted identity propagation.

Diff

diff --git a/singlesignon/latest/userguide/awsapps-that-work-with-identity-center.md b/singlesignon/latest/userguide/awsapps-that-work-with-identity-center.md
index b346dadd9..9866c7b00 100644
--- a//singlesignon/latest/userguide/awsapps-that-work-with-identity-center.md
+++ b//singlesignon/latest/userguide/awsapps-that-work-with-identity-center.md
@@ -7,42 +7,51 @@
-IAM Identity Center lets you connect your existing identity source or create users once, enabling application owners to manage access to the following AWS managed applications without separate federation or user and group synchronization. 
-
-AWS managed applications that integrate with IAM Identity Center AWS managed application | Integrated with [organization instance of IAM Identity Center](./organization-instances-identity-center.html) | Integrated with [account instances of IAM Identity Center](./account-instances-identity-center.html) | Enables [trusted identity propagation](./trustedidentitypropagation-overview.html) through IAM Identity Center  
----|---|---|---  
-Amazon AppStream 2.0 |  Yes |  No |  No  
-Amazon Athena SQL |  Yes |  Yes |  Yes  
-Amazon CodeCatalyst |  Yes |  Yes |  No  
-Amazon Connect |  Yes |  No |  No  
-Amazon DataZone |  Yes |  Yes |  Yes  
-Amazon EMR on Amazon EC2 |  Yes |  Yes |  Yes  
-Amazon EMR Studio |  Yes |  Yes |  Yes  
-Amazon Kendra |  Yes |  No |  No  
-Amazon Managed Grafana |  Yes |  No |  No  
-Amazon Monitron |  Yes |  No |  No  
-Amazon OpenSearch Service |  Yes |  Yes |  Yes  
-Amazon OpenSearch Service Serverless Service |  Yes |  Yes |  Yes  
-OpenSearch user interface (Dashboards) |  Yes |  Yes |  Yes  
-Amazon Q Business |  Yes |  Yes |  No  
-Amazon Q Developer |  Yes |  Yes* |  No  
-Amazon Q Developer operational investigations |  Yes |  No |  No  
-Amazon QuickSight |  Yes |  Yes |  Yes  
-Amazon Redshift |  Yes |  Yes |  Yes  
-Amazon S3 Access Grants |  Yes |  Yes |  Yes  
-Amazon SageMaker AI Studio |  Yes |  No |  No  
-Amazon WorkMail |  Yes |  Yes |  Yes  
-Amazon WorkSpaces |  Yes |  Yes |  No  
-Amazon WorkSpaces Secure Browser |  Yes |  No |  No  
-AWS App Studio  |  Yes |  Yes |  No  
-AWS Client VPN |  Yes |  No |  No  
-AWS CLI |  Yes |  No |  No  
-AWS Deadline Cloud |  Yes |  Yes |  No  
-AWS IoT Events |  Yes |  No |  No  
-AWS IoT Fleet Hub |  Yes |  No |  No  
-AWS IoT SiteWise |  Yes |  No |  No  
-AWS Lake Formation |  Yes |  Yes |  Yes  
-AWS re:Post Private |  Yes |  Yes |  No  
-AWS Supply Chain |  Yes |  Yes |  No  
-AWS Systems Manager |  Yes |  No |  No  
-AWS Transfer Family web apps |  Yes |  Yes |  Yes  
-AWS Transform |  Yes |  Yes |  No  
-AWS Verified Access |  Yes |  No |  No  
-Multi-party approval |  Yes |  No |  Yes  
+IAM Identity Center lets you connect your existing identity source or create users once. This enables application administrators to manage access to the following AWS managed applications without separate federation or user and group synchronization. 
+
+All of the AWS managed applications in the following table integrate with [organization instances of IAM Identity Center](./organization-instances-identity-center.html). The table also provides information about the following for a supported AWS managed application:
+
+  * Whether the application also integrates with account instances of IAM Identity Center
+
+  * Whether the application can enable trusted identity propagation through IAM Identity Center
+
+
+
+
+AWS managed applications that integrate with IAM Identity Center AWS managed application | Integrated with [account instances of IAM Identity Center](./account-instances-identity-center.html) | Enables [trusted identity propagation](./trustedidentitypropagation-overview.html) through IAM Identity Center  
+---|---|---  
+Amazon AppStream 2.0 |  No |  No  
+Amazon Athena SQL |  Yes |  Yes  
+Amazon CodeCatalyst |  Yes |  No  
+Amazon Connect |  No |  No  
+Amazon DataZone |  Yes |  Yes  
+Amazon EMR on Amazon EC2 |  Yes |  Yes  
+Amazon EMR Studio |  Yes |  Yes  
+Amazon Kendra |  No |  No  
+Amazon Managed Grafana |  No |  No  
+Amazon Monitron |  No |  No  
+Amazon OpenSearch Service |  Yes |  Yes  
+Amazon OpenSearch Service Serverless Service |  Yes |  Yes  
+OpenSearch user interface (Dashboards) |  Yes |  Yes  
+Amazon Q Business |  Yes |  Yes  
+Amazon Q Developer |  Yes* |  No  
+Amazon QuickSight |  Yes |  Yes  
+Amazon Redshift |  Yes |  Yes  
+Amazon S3 Access Grants |  Yes |  Yes  
+Amazon SageMaker Unified Studio |  Yes |  Yes  
+Amazon SageMaker Studio |  No |  Yes  
+Amazon WorkMail |  Yes |  Yes  
+Amazon WorkSpaces |  Yes |  No  
+Amazon WorkSpaces Secure Browser |  No |  No  
+AWS App Studio  |  Yes |  No  
+AWS Client VPN |  No |  No  
+AWS CLI |  No |  No  
+AWS Deadline Cloud |  Yes |  No  
+AWS IoT Events |  No |  No  
+AWS IoT Fleet Hub |  No |  No  
+AWS IoT SiteWise |  No |  No  
+AWS Lake Formation |  Yes |  Yes  
+AWS re:Post Private |  Yes |  No  
+AWS Supply Chain |  Yes |  No  
+AWS Systems Manager |  No |  No  
+AWS Transfer Family web apps |  Yes |  Yes  
+AWS Transform |  Yes |  No  
+AWS Verified Access |  No |  No  
+Multi-party approval |  No |  Yes