AWS First Steps
LanguageEnglish
New feature

AWS IAM Identity Center Identity Store APIs now accept resource ARNs in addition to resource IDs

AWS IAM Identity Center Identity Store APIs now accept resource ARNs alongside resource IDs, simplifying application code and eliminating parsing errors

AWS IAM Identity Center's identity store API now accepts Amazon Resource Names (ARNs) for users, groups, group memberships, or identity stores instead of resource IDs. This additive change allows using resource ARNs directly from IAM policy evaluations, CloudTrail events, or cross-service integrations, simplifying application code and eliminating parsing errors. The change applies to all request identifier fields in the identity store API, while responses still return resource IDs. Invalid format or incorrect resource type ARNs return a ValidationException. This feature is available in all AWS regions where AWS IAM Identity Center is offered at no additional cost. For details, see the identity store API reference.

Why it matters

Developers and administrators using AWS IAM Identity Center Identity Store APIs can now use resource ARNs directly, simplifying code and reducing errors

Read the original AWS announcement

Related articles and terms

AWS IAM Identity CenterA service that provides single sign-on to multiple AWS accounts and SaaS applicationsSingle Sign-On with AWS IAM Identity Center - Multi-Account Access ManagementAchieve single sign-on for multi-account environments and control access levels to each account with permission sets. Covers external IdP integration and ABAC usage.The Hidden Structure of AWS Account IDs' 12 Digits - Why 12 Digits, and What Can You Infer?A trivia-style exploration of why AWS account IDs are 12-digit numbers, the design intent embedded in the ARN structure, and the security considerations around what can be inferred from an account ID.AWS IAMAn authentication and authorization service for securely controlling access to AWS resources, providing fine-grained access management through users, groups, roles, and policiesDesigning Identity and Access Management - Achieving Zero Trust Security with IAMLearn access management design techniques with AWS IAM, including the principle of least privilege, policy design, and achieving zero trust security through Cognito integration.