AWS cli documentation change
Summary
Updated CLI version and added guidance about policy consistency for sso-directory/identitystore namespaces to prevent authorization conflicts
Security assessment
The change emphasizes the need for consistent IAM policies to avoid authorization conflicts, which is a security best practice but does not resolve a specific security incident.
Diff
diff --git a/cli/latest/reference/identitystore/index.md b/cli/latest/reference/identitystore/index.md index f84244b7c..384228bf7 100644 --- a//cli/latest/reference/identitystore/index.md +++ b//cli/latest/reference/identitystore/index.md @@ -15 +15 @@ - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) » @@ -61 +61 @@ This reference guide describes the identity store operations that you can call p -IAM Identity Center uses the `sso` and `identitystore` API namespaces. +IAM Identity Center uses the `sso` , `sso-directory` , and `identitystore` API namespaces. The `sso-directory` and `identitystore` namespaces authorize access to data in the Identity Store. Make sure your policies with IAM actions from these two namespaces are consistent to avoid conflicting authorization to the same data. @@ -97 +97 @@ IAM Identity Center uses the `sso` and `identitystore` API namespaces. - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) »