service
AWS IAM Identity Center: security advisories, deprecations and releases
Single sign-on and workforce access to AWS accounts.
- Items, 90 days
- 10
- Critical
- 0
- Last critical
- none
- This week
- 1
What your digest would have held this week
1 item from the last 7 days. Zero sends only the ones that touch your stack.
Releases 7
- INFO NEW THIS WEEK AWS What's New · 29 Oct 2026
AWS IAM Identity Center Identity Store now sends change events to EventBridge
IAM Identity Center can now publish real-time events to EventBridge whenever users, groups, or the identity store are created, updated, or deleted.
- INFO AWS What's New · 26 Oct 2026
AWS IAM Identity Center now supports cross-Region trusted identity propagation
Cross-Region trusted identity propagation lets IAM Identity Center carry user identity and group context to services in different AWS Regions, eliminating the need for broad IAM roles or single-Region consolidation.
- INFO AWS What's New · 20 Oct 2026
AWS IAM Identity Center simplifies identity source changes from Active Directory
IAM Identity Center now keeps users, groups, memberships, and assignments intact when switching the identity source away from Active Directory to another IdP or the built-in directory.
- MEDIUM AWS What's New · 20 Oct 2026
AWS IAM Identity Center adds optimistic locking for users and groups
IAM Identity Center now supports optimistic locking via a Revision value on users and groups. Updates and deletes succeed only if the object has not changed since last read, preventing silent overwrites when multiple admins or workflows act concurrently.
- INFO AWS What's New · 6 Oct 2026
AWS IAM Identity Center adds network access controls for Identity Store
IAM Identity Center now supports network access controls for Identity Store and SCIM APIs. You can restrict access by VPC endpoints, source VPCs, or IP ranges.
- INFO AWS What's New · 3 Oct 2026
AWS IAM Identity Center Identity Store APIs now accept resource ARNs
Identity Store APIs now accept ARNs for users, groups, and memberships in addition to resource IDs. Existing integrations remain compatible.
- INFO AWS What's New · 2 Oct 2026
AWS IAM Identity Center extends multi-Region support to more AWS Regions
IAM Identity Center now replicates identities and entitlements to additional commercial, GovCloud, and China Regions, improving resilience when the primary Region fails.
News and tools 3
- HIGH AWS Security Blog · 20 Oct 2026
Managing identity source transition for AWS IAM Identity Center
Updated guidance on switching IAM Identity Center identity sources from Active Directory to external IdP or Identity Center directory now preserves users, groups, memberships, and assignments.
- INFO AWS Security Blog · 6 Oct 2026
Identity-aware AI data agents with AWS Lake Formation and Trusted Identity Propagation
Shows how to propagate user identity end-to-end through Bedrock AgentCore so Lake Formation enforces existing per-user grants when AI agents query governed lakehouse data.
- MEDIUM AWS Security Blog · 2 Oct 2026
Automate IAM Identity Center governance
New solution continuously discovers and reports IAM Identity Center applications, assignments, and naming-convention violations.
Only hear about AWS IAM Identity Center when it touches your stack
Tell Zero what you run. You get one email, and only on the days something above applies to you.