AWS Security ChangesHomeSearch

AWS appstream2 documentation change

Service: appstream2 · 2026-04-25 · Documentation low

File: appstream2/latest/developerguide/external-identity-providers-setting-up-saml.md

Summary

Updated table of contents and added three new sections with tables for WorkSpaces Applications relay state region endpoints (recommended and old) and relay state URL parameters.

Security assessment

This change enhances SAML configuration documentation by providing updated endpoint information and distinguishing between recommended and old endpoints. While this relates to authentication (a security feature), there's no indication of fixing a specific security vulnerability.

Diff

diff --git a/appstream2/latest/developerguide/external-identity-providers-setting-up-saml.md b/appstream2/latest/developerguide/external-identity-providers-setting-up-saml.md
index dc1385795..96f84158a 100644
--- a//appstream2/latest/developerguide/external-identity-providers-setting-up-saml.md
+++ b//appstream2/latest/developerguide/external-identity-providers-setting-up-saml.md
@@ -7 +7 @@
-PrerequisitesStep 1: Create a SAML Identity Provider in AWS IAMStep 2: Create a SAML 2.0 Federation IAM RoleStep 3: Embed an Inline Policy for the IAM RoleStep 4: Configure Your SAML-Based IdPStep 5: Create Assertions for the SAML Authentication ResponseStep 6: Configure the Relay State of Your Federation
+PrerequisitesStep 1: Create a SAML Identity Provider in AWS IAMStep 2: Create a SAML 2.0 Federation IAM RoleStep 3: Embed an Inline Policy for the IAM RoleStep 4: Configure Your SAML-Based IdPStep 5: Create Assertions for the SAML Authentication ResponseStep 6: Configure the Relay State of Your FederationTable 1: WorkSpaces Applications relay state region endpoints (Recommended)Table 2: Old WorkSpaces Applications relay state region endpoints (Not recommended)Table 3: Relay state URL parameters
@@ -28,0 +29,6 @@ To enable users to sign in to WorkSpaces Applications by using their existing cr
+  * Table 1: WorkSpaces Applications relay state region endpoints (Recommended)
+
+  * Table 2: Old WorkSpaces Applications relay state region endpoints (Not recommended)
+
+  * Table 3: Relay state URL parameters
+
@@ -261,0 +268,2 @@ For more information, see [Attribute-Based Application Entitlements Using a Thir
+## Table 1: WorkSpaces Applications relay state region endpoints (Recommended)
+
@@ -294,0 +303,2 @@ Israel (Tel Aviv) | `https://appstream2.euc-sso.il-central-1.aws.amazon.com/saml
+## Table 2: Old WorkSpaces Applications relay state region endpoints (Not recommended)
+
@@ -322,0 +333,2 @@ South America (São Paulo) | `https://appstream2.sa-east-1.aws.amazon.com/saml`
+## Table 3: Relay state URL parameters
+