AWS singlesignon documentation change
Summary
Added documentation for AWSIdentityCenterExternalManagementPolicy IAM policy enabling external user management
Security assessment
Introduces documentation for a security feature (external identity management) but does not indicate resolution of a security flaw
Diff
diff --git a/singlesignon/latest/userguide/security-iam-awsmanpol.md b/singlesignon/latest/userguide/security-iam-awsmanpol.md index 22a8ceddd..3cc85e7a9 100644 --- a//singlesignon/latest/userguide/security-iam-awsmanpol.md +++ b//singlesignon/latest/userguide/security-iam-awsmanpol.md @@ -5 +5 @@ -AWSSSOMasterAccountAdministratorAWSSSOMemberAccountAdministratorAWSSSODirectoryAdministratorAWSSSOReadOnlyAWSSSODirectoryReadOnlyAWSIdentitySyncFullAccessAWSIdentitySyncReadOnlyAccessAWSSSOServiceRolePolicyAWSIAMIdentityCenterAllowListForIdentityContextIAM Identity Center updates to AWS managed policies +AWSSSOMasterAccountAdministratorAWSSSOMemberAccountAdministratorAWSSSODirectoryAdministratorAWSSSOReadOnlyAWSSSODirectoryReadOnlyAWSIdentitySyncFullAccessAWSIdentitySyncReadOnlyAccessAWSSSOServiceRolePolicyAWSIAMIdentityCenterAllowListForIdentityContextAWSIdentityCenterExternalManagementPolicyIAM Identity Center updates to AWS managed policies @@ -209,0 +210,8 @@ To view the permissions for this policy, see [AWSIAMIdentityCenterAllowListForId +## AWS managed policy: AWSIdentityCenterExternalManagementPolicy + +You can attach the `AWSIdentityCenterExternalManagementPolicy` policy to your IAM identities. + +This policy provides access to manage IAM Identity Center users from an external provider. + +To view the permissions for this policy, see [AWSIdentityCenterExternalManagementPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSIdentityCenterExternalManagementPolicy.html) in _AWS Managed Policy Reference_. + @@ -215,0 +224 @@ Change | Description | Date +AWSIdentityCenterExternalManagementPolicy | This policy provides access to manage IAM Identity Center users from an external provider. | November 21, 2025