AWS Security ChangesHomeSearch

AWS singlesignon documentation change

Service: singlesignon · 2025-11-10 · Documentation low

File: singlesignon/latest/IdentityStoreAPIReference/API_CreateGroupMembership.md

Summary

Added KMS-related error reason documentation for access denial, resource not found, throttling, and validation errors

Security assessment

Similar to CreateGroup changes, this adds documentation about KMS integration error handling for security-sensitive operations, but does not indicate a security fix.

Diff

diff --git a/singlesignon/latest/IdentityStoreAPIReference/API_CreateGroupMembership.md b/singlesignon/latest/IdentityStoreAPIReference/API_CreateGroupMembership.md
index 49526b21e..a399ac81e 100644
--- a//singlesignon/latest/IdentityStoreAPIReference/API_CreateGroupMembership.md
+++ b//singlesignon/latest/IdentityStoreAPIReference/API_CreateGroupMembership.md
@@ -8,0 +9,2 @@ Request SyntaxRequest ParametersResponse SyntaxResponse ElementsErrorsExamplesSe
+Creates a relationship between a member and a group. The following identifiers must be specified: `GroupId`, `IdentityStoreId`, and `MemberId`.
+
@@ -105,0 +108,5 @@ You do not have sufficient access to perform this action.
+**Reason**
+    
+
+Indicates the reason for an access denial when returned by KMS while accessing a Customer Managed KMS key. For non-KMS access-denied errors, this field is not included.
+
@@ -165,0 +173,5 @@ Indicates that a requested resource is not found.
+**Reason**
+    
+
+Indicates the reason for a resource not found error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+
@@ -199,0 +212,5 @@ Indicates that the principal has crossed the throttling limits of the API operat
+**Reason**
+    
+
+Indicates the reason for the throttling error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+
@@ -216,0 +234,5 @@ The request failed because it contains a syntax error.
+**Reason**
+    
+
+Indicates the reason for the validation error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+