AWS Security ChangesHomeSearch

AWS singlesignon documentation change

Service: singlesignon · 2025-11-25 · Documentation medium

File: singlesignon/latest/userguide/security-iam-awsmanpol.md

Summary

Added documentation for AWSIdentityCenterExternalManagementPolicy IAM policy enabling external user management

Security assessment

Introduces documentation for a security feature (external identity management) but does not indicate resolution of a security flaw

Diff

diff --git a/singlesignon/latest/userguide/security-iam-awsmanpol.md b/singlesignon/latest/userguide/security-iam-awsmanpol.md
index 22a8ceddd..3cc85e7a9 100644
--- a//singlesignon/latest/userguide/security-iam-awsmanpol.md
+++ b//singlesignon/latest/userguide/security-iam-awsmanpol.md
@@ -5 +5 @@
-AWSSSOMasterAccountAdministratorAWSSSOMemberAccountAdministratorAWSSSODirectoryAdministratorAWSSSOReadOnlyAWSSSODirectoryReadOnlyAWSIdentitySyncFullAccessAWSIdentitySyncReadOnlyAccessAWSSSOServiceRolePolicyAWSIAMIdentityCenterAllowListForIdentityContextIAM Identity Center updates to AWS managed policies
+AWSSSOMasterAccountAdministratorAWSSSOMemberAccountAdministratorAWSSSODirectoryAdministratorAWSSSOReadOnlyAWSSSODirectoryReadOnlyAWSIdentitySyncFullAccessAWSIdentitySyncReadOnlyAccessAWSSSOServiceRolePolicyAWSIAMIdentityCenterAllowListForIdentityContextAWSIdentityCenterExternalManagementPolicyIAM Identity Center updates to AWS managed policies
@@ -209,0 +210,8 @@ To view the permissions for this policy, see [AWSIAMIdentityCenterAllowListForId
+## AWS managed policy: AWSIdentityCenterExternalManagementPolicy
+
+You can attach the `AWSIdentityCenterExternalManagementPolicy` policy to your IAM identities.
+
+This policy provides access to manage IAM Identity Center users from an external provider.
+
+To view the permissions for this policy, see [AWSIdentityCenterExternalManagementPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSIdentityCenterExternalManagementPolicy.html) in _AWS Managed Policy Reference_.
+
@@ -215,0 +224 @@ Change | Description | Date
+AWSIdentityCenterExternalManagementPolicy |  This policy provides access to manage IAM Identity Center users from an external provider. | November 21, 2025