AWS Security ChangesHomeSearch

AWS singlesignon low security documentation change

Service: singlesignon · 2025-11-10 · Security-related low

File: singlesignon/latest/IdentityStoreAPIReference/API_DeleteGroupMembership.md

Summary

Added error reason documentation for KMS-related access issues in DeleteGroupMembership API errors

Security assessment

Documented KMS-specific error reasons for membership deletion operations. This clarifies security-related error scenarios involving encryption keys but doesn't indicate a resolved security vulnerability.

Diff

diff --git a/singlesignon/latest/IdentityStoreAPIReference/API_DeleteGroupMembership.md b/singlesignon/latest/IdentityStoreAPIReference/API_DeleteGroupMembership.md
index a46c7bdcd..bbb37d238 100644
--- a//singlesignon/latest/IdentityStoreAPIReference/API_DeleteGroupMembership.md
+++ b//singlesignon/latest/IdentityStoreAPIReference/API_DeleteGroupMembership.md
@@ -8,0 +9,2 @@ Request SyntaxRequest ParametersResponse ElementsErrorsExamplesSee Also
+Delete a membership within a group given `MembershipId`.
+
@@ -61,0 +64,5 @@ You do not have sufficient access to perform this action.
+**Reason**
+    
+
+Indicates the reason for an access denial when returned by KMS while accessing a Customer Managed KMS key. For non-KMS access-denied errors, this field is not included.
+
@@ -121,0 +129,5 @@ Indicates that a requested resource is not found.
+**Reason**
+    
+
+Indicates the reason for a resource not found error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+
@@ -143,0 +156,5 @@ Indicates that the principal has crossed the throttling limits of the API operat
+**Reason**
+    
+
+Indicates the reason for the throttling error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+
@@ -160,0 +178,5 @@ The request failed because it contains a syntax error.
+**Reason**
+    
+
+Indicates the reason for the validation error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+