AWS singlesignon medium security documentation change

Service: singlesignon · 2025-12-10 · Security-related medium

File: singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.md

Summary

Updated conflict error explanation to specify KMS key access issues and added two new examples for updating enterprise extension attributes.

Security assessment

The change explicitly documents KMS key access errors as a security-related conflict scenario. Customer Managed KMS keys are security features controlling encryption access, and failure to access them represents a security impact. This documentation helps users troubleshoot security-related permission issues.

Diff

diff --git a/singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.md b/singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.md
index 1ef7c6a61..92cb6879e 100644
--- a//singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.md
+++ b//singlesignon/latest/IdentityStoreAPIReference/API_UpdateUser.md
@@ -108,8 +108 @@ This request cannot be completed for one of the following reasons:
-This request cannot be completed for one of the following reasons:
-
-  * Performing the requested operation would violate an existing uniqueness claim in the identity store. Resolve the conflict before retrying this request.
-
-  * The requested resource was being concurrently modified by another request.
-
-
-
+Indicates the reason for a conflict error when the service is unable to access a Customer Managed KMS key. For non-KMS permission errors, this field is not included.
@@ -305,0 +299,53 @@ This example updates the phone number for the specified user.
+### Example 4
+
+This example replaces all attributes in `aws:identitystore:enterprise` extension for the specified user.
+
+#### Sample Request
+    
+    
+    {
+        "IdentityStoreId": "d-1234567890",
+        "UserId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
+        "Operations": [
+            {
+                "AttributePath": "aws:identitystore:enterprise",
+                "AttributeValue": {
+                    "employeeNumber": "701984",
+                    "costCenter": "4130"
+                }
+            }
+        ]
+    }
+    
+
+#### Sample Response
+    
+    
+    No response
+    
+
+### Example 5
+
+This example replaces only `department` in `aws:identitystore:enterprise` extension for the specified user.
+
+#### Sample Request
+    
+    
+    {
+        "IdentityStoreId": "d-1234567890",
+        "UserId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
+        "Operations": [
+            {
+                "AttributePath": "aws:identitystore:enterprise.department",
+                "AttributeValue": "Park Admissions"
+            }
+        ]
+    }
+    
+
+#### Sample Response
+    
+    
+    No response
+    
+