AWS Security ChangesHomeSearch

AWS singlesignon low security documentation change

Service: singlesignon · 2025-11-10 · Security-related low

File: singlesignon/latest/IdentityStoreAPIReference/API_DeleteUser.md

Summary

Added error reason documentation for KMS-related access issues in DeleteUser API errors

Security assessment

Enhanced error documentation to specify KMS access issues during user deletion. While related to security feature (KMS), this appears to be documentation improvement rather than addressing a specific security flaw.

Diff

diff --git a/singlesignon/latest/IdentityStoreAPIReference/API_DeleteUser.md b/singlesignon/latest/IdentityStoreAPIReference/API_DeleteUser.md
index 7548fed8b..128755db7 100644
--- a//singlesignon/latest/IdentityStoreAPIReference/API_DeleteUser.md
+++ b//singlesignon/latest/IdentityStoreAPIReference/API_DeleteUser.md
@@ -8,0 +9,2 @@ Request SyntaxRequest ParametersResponse ElementsErrorsExamplesSee Also
+Deletes a user within an identity store given `UserId`.
+
@@ -61,0 +64,5 @@ You do not have sufficient access to perform this action.
+**Reason**
+    
+
+Indicates the reason for an access denial when returned by KMS while accessing a Customer Managed KMS key. For non-KMS access-denied errors, this field is not included.
+
@@ -121,0 +129,5 @@ Indicates that a requested resource is not found.
+**Reason**
+    
+
+Indicates the reason for a resource not found error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+
@@ -143,0 +156,5 @@ Indicates that the principal has crossed the throttling limits of the API operat
+**Reason**
+    
+
+Indicates the reason for the throttling error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+
@@ -160,0 +178,5 @@ The request failed because it contains a syntax error.
+**Reason**
+    
+
+Indicates the reason for the validation error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+