AWS Security ChangesHomeSearch

AWS singlesignon documentation change

Service: singlesignon · 2025-11-10 · Documentation low

File: singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.md

Summary

Added error reason documentation related to Customer Managed KMS key access issues in UpdateUser API

Security assessment

Similar to the UpdateGroup changes, this clarifies KMS-related error handling for user updates but does not address a specific security vulnerability.

Diff

diff --git a/singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.md b/singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.md
index 9468cdd7f..1ef7c6a61 100644
--- a//singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.md
+++ b//singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.md
@@ -8,0 +9,2 @@ Request SyntaxRequest ParametersResponse ElementsErrorsExamplesSee Also
+Updates the specified user metadata and attributes in the specified identity store.
+
@@ -78,0 +81,5 @@ You do not have sufficient access to perform this action.
+**Reason**
+    
+
+Indicates the reason for an access denial when returned by KMS while accessing a Customer Managed KMS key. For non-KMS access-denied errors, this field is not included.
+
@@ -138,0 +146,5 @@ Indicates that a requested resource is not found.
+**Reason**
+    
+
+Indicates the reason for a resource not found error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+
@@ -172,0 +185,5 @@ Indicates that the principal has crossed the throttling limits of the API operat
+**Reason**
+    
+
+Indicates the reason for the throttling error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+
@@ -189,0 +207,5 @@ The request failed because it contains a syntax error.
+**Reason**
+    
+
+Indicates the reason for the validation error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
+