AWS singlesignon documentation change

Service: singlesignon · 2025-11-10 · Documentation low

File: singlesignon/latest/IdentityStoreAPIReference/API_GetGroupMembershipId.md

Summary

Added documentation about member account access limitations and KMS-related error reasons

Security assessment

The changes add guidance about limiting access from member accounts (security best practice) and clarify KMS-related error reasons for encryption key access. While security-related, there's no evidence of addressing a specific vulnerability.

Diff

diff --git a/singlesignon/latest/IdentityStoreAPIReference/API_GetGroupMembershipId.md b/singlesignon/latest/IdentityStoreAPIReference/API_GetGroupMembershipId.md
index bc60d3f4e..d0edcd652 100644
--- a//singlesignon/latest/IdentityStoreAPIReference/API_GetGroupMembershipId.md
+++ b//singlesignon/latest/IdentityStoreAPIReference/API_GetGroupMembershipId.md
@@ -8,0 +9,6 @@ Request SyntaxRequest ParametersResponse SyntaxResponse ElementsErrorsExamplesSe
+Retrieves the `MembershipId` in an identity store.
+
+###### Note
+
+If you have access to a member account, you can use this API operation from the member account. For more information, see [Limiting access to the identity store from member accounts](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts) in the _AWS IAM Identity Center User Guide_.
+
@@ -105,0 +112,5 @@ You do not have sufficient access to perform this action.
+**Reason**
+    
+
+Indicates the reason for an access denial when returned by KMS while accessing a Customer Managed KMS key. For non-KMS access-denied errors, this field is not included.
+
@@ -134,0 +146,5 @@ Indicates that a requested resource is not found.
+**Reason**
+    
+
+Indicates the reason for a resource not found error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+
@@ -156,0 +173,5 @@ Indicates that the principal has crossed the throttling limits of the API operat
+**Reason**
+    
+
+Indicates the reason for the throttling error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+
@@ -173,0 +195,5 @@ The request failed because it contains a syntax error.
+**Reason**
+    
+
+Indicates the reason for the validation error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+