AWS IAM Identity Center
(sso)
IAM Changes
Services
2025-09-18
2025-09-18
114 updated actions
Updates
Actions
CreateInstance
Dependents
+ identitystore:CreateIdentityStore
ListApplicationInstances
Dependents
+ kms:Decrypt
ListProfiles
Dependents
+ kms:Decrypt
StartSSO
Dependents
+ kms:Decrypt
+ kms:DescribeKey
+ kms:Encrypt
+ kms:GenerateDataKeyWithoutPlaintext
AssociateDirectory
Dependents
+ identitystore:CreateIdentityStore
+ kms:Decrypt
AssociateProfile
Dependents
+ kms:Decrypt
AttachCustomerManagedPolicyReferenceToPermissionSet
Dependents
+ kms:Decrypt
AttachManagedPolicyToPermissionSet
Dependents
+ kms:Decrypt
CreateAccountAssignment
Dependents
+ kms:Decrypt
CreateApplication
Dependents
+ kms:Decrypt
CreateApplicationAssignment
Dependents
+ kms:Decrypt
CreateApplicationInstance
Dependents
+ kms:Decrypt
CreateApplicationInstanceCertificate
Dependents
+ kms:Decrypt
CreateInstanceAccessControlAttributeConfiguration
Dependents
+ kms:Decrypt
CreateManagedApplicationInstance
Dependents
+ kms:Decrypt
CreatePermissionSet
Dependents
+ kms:Decrypt
CreateProfile
Dependents
+ kms:Decrypt
CreateTrust
Dependents
+ kms:Decrypt
CreateTrustedTokenIssuer
Dependents
+ kms:Decrypt
DeleteAccountAssignment
Dependents
+ kms:Decrypt
DeleteApplication
Dependents
+ kms:Decrypt
DeleteApplicationAccessScope
Dependents
+ kms:Decrypt
DeleteApplicationAssignment
Dependents
+ kms:Decrypt
DeleteApplicationAuthenticationMethod
Dependents
+ kms:Decrypt
DeleteApplicationGrant
Dependents
+ kms:Decrypt
DeleteApplicationInstance
Dependents
+ kms:Decrypt
DeleteApplicationInstanceCertificate
Dependents
+ kms:Decrypt
DeleteInlinePolicyFromPermissionSet
Dependents
+ kms:Decrypt
DeleteInstance
Dependents
+ identitystore:DeleteIdentityStore
DeleteInstanceAccessControlAttributeConfiguration
Dependents
+ kms:Decrypt
DeleteManagedApplicationInstance
Dependents
+ kms:Decrypt
DeletePermissionSet
Dependents
+ kms:Decrypt
DeletePermissionsBoundaryFromPermissionSet
Dependents
+ kms:Decrypt
DeleteProfile
Dependents
+ kms:Decrypt
DeleteTrustedTokenIssuer
Dependents
+ kms:Decrypt
DescribeAccountAssignmentCreationStatus
Dependents
+ kms:Decrypt
DescribeAccountAssignmentDeletionStatus
Dependents
+ kms:Decrypt
DescribeApplication
Dependents
+ kms:Decrypt
DescribeApplicationAssignment
Dependents
+ kms:Decrypt
DescribeInstanceAccessControlAttributeConfiguration
Dependents
+ kms:Decrypt
DescribePermissionSet
Dependents
+ kms:Decrypt
DescribePermissionSetProvisioningStatus
Dependents
+ kms:Decrypt
DescribeTrustedTokenIssuer
Dependents
+ kms:Decrypt
DetachCustomerManagedPolicyReferenceFromPermissionSet
Dependents
+ kms:Decrypt
DetachManagedPolicyFromPermissionSet
Dependents
+ kms:Decrypt
DisassociateDirectory
Dependents
+ identitystore:DeleteIdentityStore
+ kms:Decrypt
DisassociateProfile
Dependents
+ kms:Decrypt
GetApplicationAccessScope
Dependents
+ kms:Decrypt
GetApplicationAssignmentConfiguration
Dependents
+ kms:Decrypt
GetApplicationAuthenticationMethod
Dependents
+ kms:Decrypt
GetApplicationGrant
Dependents
+ kms:Decrypt
GetApplicationInstance
Dependents
+ kms:Decrypt
GetApplicationSessionConfiguration
Dependents
+ kms:Decrypt
GetInlinePolicyForPermissionSet
Dependents
+ kms:Decrypt
GetManagedApplicationInstance
Dependents
+ kms:Decrypt
GetMfaDeviceManagementForDirectory
Dependents
+ kms:Decrypt
GetPermissionSet
Dependents
+ kms:Decrypt
GetPermissionsBoundaryForPermissionSet
Dependents
+ kms:Decrypt
GetProfile
Dependents
+ kms:Decrypt
GetSharedSsoConfiguration
Dependents
+ kms:Decrypt
GetSsoConfiguration
Dependents
+ kms:Decrypt
GetTrust
Dependents
+ kms:Decrypt
ImportApplicationInstanceServiceProviderMetadata
Dependents
+ kms:Decrypt
ListAccountAssignmentCreationStatus
Dependents
+ kms:Decrypt
ListAccountAssignmentDeletionStatus
Dependents
+ kms:Decrypt
ListAccountAssignments
Dependents
+ kms:Decrypt
ListAccountAssignmentsForPrincipal
Dependents
+ kms:Decrypt
ListAccountsForProvisionedPermissionSet
Dependents
+ kms:Decrypt
ListApplicationAccessScopes
Dependents
+ kms:Decrypt
ListApplicationAssignments
Dependents
+ kms:Decrypt
ListApplicationAssignmentsForPrincipal
Dependents
+ kms:Decrypt
ListApplicationAuthenticationMethods
Dependents
+ kms:Decrypt
ListApplicationGrants
Dependents
+ kms:Decrypt
ListApplicationInstanceCertificates
Dependents
+ kms:Decrypt
ListApplications
Dependents
+ kms:Decrypt
ListCustomerManagedPolicyReferencesInPermissionSet
Dependents
+ kms:Decrypt
ListDirectoryAssociations
Dependents
+ kms:Decrypt
ListManagedPoliciesInPermissionSet
Dependents
+ kms:Decrypt
ListPermissionSetProvisioningStatus
Dependents
+ kms:Decrypt
ListPermissionSets
Dependents
+ kms:Decrypt
ListPermissionSetsProvisionedToAccount
Dependents
+ kms:Decrypt
ListProfileAssociations
Dependents
+ kms:Decrypt
ListTagsForResource
Dependents
+ kms:Decrypt
ListTrustedTokenIssuers
Dependents
+ kms:Decrypt
ProvisionPermissionSet
Dependents
+ kms:Decrypt
PutApplicationAccessScope
Dependents
+ kms:Decrypt
PutApplicationAssignmentConfiguration
Dependents
+ kms:Decrypt
PutApplicationAuthenticationMethod
Dependents
+ kms:Decrypt
PutApplicationGrant
Dependents
+ kms:Decrypt
PutApplicationSessionConfiguration
Dependents
+ kms:Decrypt
PutInlinePolicyToPermissionSet
Dependents
+ kms:Decrypt
PutMfaDeviceManagementForDirectory
Dependents
+ kms:Decrypt
PutPermissionsBoundaryToPermissionSet
Dependents
+ kms:Decrypt
PutPermissionsPolicy
Dependents
+ kms:Decrypt
SearchGroups
Dependents
+ kms:Decrypt
SearchUsers
Dependents
+ kms:Decrypt
TagResource
Dependents
+ kms:Decrypt
UntagResource
Dependents
+ kms:Decrypt
UpdateApplication
Dependents
+ kms:Decrypt
UpdateApplicationInstanceActiveCertificate
Dependents
+ kms:Decrypt
UpdateApplicationInstanceDisplayData
Dependents
+ kms:Decrypt
UpdateApplicationInstanceResponseConfiguration
Dependents
+ kms:Decrypt
UpdateApplicationInstanceResponseSchemaConfiguration
Dependents
+ kms:Decrypt
UpdateApplicationInstanceSecurityConfiguration
Dependents
+ kms:Decrypt
UpdateApplicationInstanceServiceProviderConfiguration
Dependents
+ kms:Decrypt
UpdateApplicationInstanceStatus
Dependents
+ kms:Decrypt
UpdateInstance
Dependents
+ identitystore:UpdateIdentityStore
+ kms:Decrypt
+ kms:DescribeKey
+ kms:Encrypt
+ kms:GenerateDataKeyWithoutPlaintext
UpdateInstanceAccessControlAttributeConfiguration
Dependents
+ kms:Decrypt
UpdateManagedApplicationInstanceStatus
Dependents
+ kms:Decrypt
UpdatePermissionSet
Dependents
+ kms:Decrypt
UpdateProfile
Dependents
+ kms:Decrypt
UpdateSSOConfiguration
Dependents
+ kms:Decrypt
UpdateTrust
Dependents
+ kms:Decrypt
UpdateTrustedTokenIssuer
Dependents
+ kms:Decrypt