AWS singlesignon documentation change

Service: singlesignon · 2025-08-28 · Documentation low

File: singlesignon/latest/userguide/iam-auth-access-using-id-policies.md

Summary

Removed JSON policy example granting various IAM Identity Center console permissions

Security assessment

The deletion of a detailed policy example does not indicate any security issue resolution. This seems like documentation simplification rather than security-related change.

Diff

diff --git a/singlesignon/latest/userguide/iam-auth-access-using-id-policies.md b/singlesignon/latest/userguide/iam-auth-access-using-id-policies.md
index 41e3dbffa..331ed47f7 100644
--- a//singlesignon/latest/userguide/iam-auth-access-using-id-policies.md
+++ b//singlesignon/latest/userguide/iam-auth-access-using-id-policies.md
@@ -283,62 +282,0 @@ For a user to work with the IAM Identity Center console without errors, addition
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "sso:DescribeAccountAssignmentCreationStatus",
-                    "sso:DescribeAccountAssignmentDeletionStatus",
-                    "sso:DescribePermissionSet",
-                    "sso:DescribePermissionSetProvisioningStatus",
-                    "sso:DescribePermissionsPolicies",
-                    "sso:DescribeRegisteredRegions",
-                    "sso:GetApplicationInstance",
-                    "sso:GetApplicationTemplate",
-                    "sso:GetInlinePolicyForPermissionSet",
-                    "sso:GetManagedApplicationInstance",
-                    "sso:GetMfaDeviceManagementForDirectory",
-                    "sso:GetPermissionSet",
-                    "sso:GetPermissionsPolicy",
-                    "sso:GetProfile",
-                    "sso:GetSharedSsoConfiguration",
-                    "sso:GetSsoConfiguration",
-                    "sso:GetSSOStatus",
-                    "sso:GetTrust",
-                    "sso:ListAccountAssignmentCreationStatus",
-                    "sso:ListAccountAssignmentDeletionStatus",
-                    "sso:ListAccountAssignments",
-                    "sso:ListAccountsForProvisionedPermissionSet",
-                    "sso:ListApplicationInstanceCertificates",
-                    "sso:ListApplicationInstances",
-                    "sso:ListApplications",
-                    "sso:ListApplicationTemplates",
-                    "sso:ListDirectoryAssociations",
-                    "sso:ListInstances",
-                    "sso:ListManagedPoliciesInPermissionSet",
-                    "sso:ListPermissionSetProvisioningStatus",
-                    "sso:ListPermissionSets",
-                    "sso:ListPermissionSetsProvisionedToAccount",
-                    "sso:ListProfileAssociations",
-                    "sso:ListProfiles",
-                    "sso:ListTagsForResource",
-                    "sso-directory:DescribeDirectory",
-                    "sso-directory:DescribeGroups",
-                    "sso-directory:DescribeUsers",
-                    "sso-directory:ListGroupsForUser",
-                    "sso-directory:ListMembersInGroup",
-                    "sso-directory:SearchGroups",
-                    "sso-directory:SearchUsers"
-                ],
-                "Resource": "*"
-            }
-        ]
-    }
-    
-