AWS glue high security documentation change

Service: glue · 2025-08-19 · Security-related high

File: glue/latest/dg/aws-glue-api-interactive-sessions.md

Summary

Added four new API actions for managing AWS Glue Identity Center configurations (Get, Update, Create, Delete) including documentation for request/response parameters and errors

Security assessment

The added actions directly relate to configuring integration with AWS IAM Identity Center, which handles authentication and authorization. The documentation describes managing security scopes and permissions for AWS Glue access control. This introduces security-related configuration capabilities for federated identity management.

Diff

diff --git a/glue/latest/dg/aws-glue-api-interactive-sessions.md b/glue/latest/dg/aws-glue-api-interactive-sessions.md
index f7aa927fe..99b803777 100644
--- a//glue/latest/dg/aws-glue-api-interactive-sessions.md
+++ b//glue/latest/dg/aws-glue-api-interactive-sessions.md
@@ -5 +5 @@
-— data types —SessionSessionCommandStatementStatementOutputStatementOutputDataConnectionsList — operations —CreateSession (create_session)StopSession (stop_session)DeleteSession (delete_session)GetSession (get_session)ListSessions (list_sessions)RunStatement (run_statement)CancelStatement (cancel_statement)GetStatement (get_statement)ListStatements (list_statements)
+— data types —SessionSessionCommandStatementStatementOutputStatementOutputDataConnectionsList — operations —CreateSession (create_session)StopSession (stop_session)DeleteSession (delete_session)GetSession (get_session)ListSessions (list_sessions)RunStatement (run_statement)CancelStatement (cancel_statement)GetStatement (get_statement)ListStatements (list_statements)GetGlueIdentityCenterConfiguration (get_glue_identity_center_configuration)UpdateGlueIdentityCenterConfiguration (update_glue_identity_center_configuration)CreateGlueIdentityCenterConfiguration (create_glue_identity_center_configuration)DeleteGlueIdentityCenterConfiguration (delete_glue_identity_center_configuration)
@@ -261,0 +262,8 @@ A list of connections used by the job.
+  * GetGlueIdentityCenterConfiguration action (Python: get_glue_identity_center_configuration)
+
+  * UpdateGlueIdentityCenterConfiguration action (Python: update_glue_identity_center_configuration)
+
+  * CreateGlueIdentityCenterConfiguration action (Python: create_glue_identity_center_configuration)
+
+  * DeleteGlueIdentityCenterConfiguration action (Python: delete_glue_identity_center_configuration)
+
@@ -775,0 +784,168 @@ A continuation token, if not all statements have yet been returned.
+## GetGlueIdentityCenterConfiguration action (Python: get_glue_identity_center_configuration)
+
+Retrieves the current AWS Glue Identity Center configuration details, including the associated Identity Center instance and application information.
+
+###### Request
+
+  * _No Request parameters._
+
+
+
+
+###### Response
+
+Response containing the AWS Glue Identity Center configuration details.
+
+  * `ApplicationArn` – UTF-8 string, not less than 10 or more than 1224 bytes long.
+
+The Amazon Resource Name (ARN) of the Identity Center application associated with the AWS Glue configuration.
+
+  * `InstanceArn` – UTF-8 string, not less than 10 or more than 1224 bytes long.
+
+The Amazon Resource Name (ARN) of the Identity Center instance associated with the AWS Glue configuration.
+
+  * `Scopes` – An array of UTF-8 strings.
+
+A list of Identity Center scopes that define the permissions and access levels for the AWS Glue configuration.
+
+
+
+
+###### Errors
+
+  * `InvalidInputException`
+
+  * `EntityNotFoundException`
+
+  * `InternalServiceException`
+
+  * `OperationTimeoutException`
+
+  * `AccessDeniedException`
+
+  * `ConcurrentModificationException`
+
+
+
+
+## UpdateGlueIdentityCenterConfiguration action (Python: update_glue_identity_center_configuration)
+
+Updates the existing AWS Glue Identity Center configuration, allowing modification of scopes and permissions for the integration.
+
+###### Request
+
+Request to update an existing AWS Glue Identity Center configuration.
+
+  * `Scopes` – An array of UTF-8 strings, not less than 1 or more than 50 strings.
+
+A list of Identity Center scopes that define the updated permissions and access levels for the AWS Glue configuration.
+
+
+
+
+###### Response
+
+  * _No Response parameters._
+
+
+
+
+###### Errors
+
+  * `InvalidInputException`
+
+  * `EntityNotFoundException`
+
+  * `InternalServiceException`
+
+  * `OperationTimeoutException`
+
+  * `AccessDeniedException`
+
+  * `ConcurrentModificationException`
+
+
+
+
+## CreateGlueIdentityCenterConfiguration action (Python: create_glue_identity_center_configuration)
+
+Creates a new AWS Glue Identity Center configuration to enable integration between AWS Glue and AWS IAM Identity Center for authentication and authorization.
+
+###### Request
+
+Request to create a new AWS Glue Identity Center configuration.
+
+  * `InstanceArn` – _Required:_ UTF-8 string, not less than 10 or more than 1224 bytes long.
+
+The Amazon Resource Name (ARN) of the Identity Center instance to be associated with the AWS Glue configuration.
+
+  * `Scopes` – An array of UTF-8 strings, not less than 1 or more than 50 strings.
+
+A list of Identity Center scopes that define the permissions and access levels for the AWS Glue configuration.
+
+
+
+
+###### Response
+
+Response from creating a new AWS Glue Identity Center configuration.
+
+  * `ApplicationArn` – UTF-8 string, not less than 10 or more than 1224 bytes long.
+
+The Amazon Resource Name (ARN) of the Identity Center application that was created for the AWS Glue configuration.
+
+
+
+
+###### Errors
+
+  * `InvalidInputException`
+
+  * `AlreadyExistsException`
+
+  * `InternalServiceException`
+
+  * `OperationTimeoutException`
+
+  * `AccessDeniedException`
+
+  * `ConcurrentModificationException`
+
+
+
+
+## DeleteGlueIdentityCenterConfiguration action (Python: delete_glue_identity_center_configuration)
+
+Deletes the existing AWS Glue Identity Center configuration, removing the integration between AWS Glue and AWS IAM Identity Center.
+
+###### Request
+
+  * _No Request parameters._
+
+
+
+
+###### Response
+
+  * _No Response parameters._
+
+
+
+
+###### Errors
+
+  * `InvalidInputException`
+
+  * `EntityNotFoundException`
+
+  * `InternalServiceException`
+
+  * `OperationTimeoutException`
+
+  * `AccessDeniedException`
+
+  * `ConcurrentModificationException`
+
+
+
+