AWS IAM Identity Center's Identity Store now supports change notifications through Amazon EventBridge

AWS IAM Identity Center's Identity Store now delivers events to Amazon EventBridge in real time when creating, updating, or deleting users, groups, or group memberships. Acting as the identity source for AWS IAM Identity Center, the Identity Store centrally manages identities across AWS accounts and applications. This feature enables automated responses to identity lifecycle events, supporting security and compliance processes. By creating EventBridge rules, users can automate workflows such as auditing user provisioning activities, sending alerts to SIEM systems, and updating access in downstream applications. For large organizations, it also automates onboarding and offboarding when users are added to or removed from specific groups. Change notifications are available in all AWS regions where IAM Identity Center is offered, with events sent per enabled region. The change notifications are free except for standard Amazon EventBridge charges.

Why it matters

This change is useful for security teams and large organizations that need automated responses to identity changes