AWS - IAM Identity Center

Integrations

AWS - IAM Identity Center

• Updated the context path prefix to be AWS.IAMIdentityCenter instead of AWS.IAM.

• Created a new playbook.

• Added 6 commands:

  • aws-iam-identitycenter-delete-user
  • aws-iam-identitycenter-create-group
  • aws-iam-identitycenter-delete-group
  • aws-iam-identitycenter-list-memberships
  • aws-iam-identitycenter-update-user
  • aws-iam-identitycenter-update-group

• Added support for the following arguments in the aws-iam-identitycenter-create-user, aws-iam-identitycenter-list-users, aws-iam-identitycenter-get-user, aws-iam-identitycenter-get-user-by-email, aws-iam-identitycenter-list-groups,aws-iam-identitycenter-get-group, aws-iam-identitycenter-add-user-to-group, aws-iam-identitycenter-list-groups-for-user and aws-iam-identitycenter-delete-group-membership commands.

  • identityStoreId
  • region
  • roleArn
  • roleSessionDuration
  • roleSessionName

• Added the full API responses to the context data in the following commands:

  • aws-iam-identitycenter-create-user
  • aws-iam-identitycenter-list-users
  • aws-iam-identitycenter-get-user
  • aws-iam-identitycenter-get-user-by-email
  • aws-iam-identitycenter-list-groups
  • aws-iam-identitycenter-get-group
  • aws-iam-identitycenter-list-groups-for-user

• Updated the context path to be AWS.IAMIdentityCenter.User in the following commands:

  • aws-iam-identitycenter-create-user
  • aws-iam-identitycenter-list-users
  • aws-iam-identitycenter-get-user
  • aws-iam-identitycenter-get-user-by-email
  • aws-iam-identitycenter-list-groups-for-user

• Updated the context path to be AWS.IAMIdentityCenter.Group in the following commands:

  • aws-iam-identitycenter-list-groups
  • aws-iam-identitycenter-get-group

• Deprecated the ResponseMetadata from context data and human readable in the following commands:

  • aws-iam-identitycenter-create-user
  • aws-iam-identitycenter-get-user
  • aws-iam-identitycenter-create-group
  • aws-iam-identitycenter-get-group

• Added support for the following arguments in the aws-iam-identitycenter-list-users, aws-iam-identitycenter-list-groups and aws-iam-identitycenter-list-groups-for-user commands.

  • limit
  • nextToken

• Added support for the following arguments in the aws-iam-identitycenter-create-user command.

  • userType
  • profileUrl
  • title
  • region

• Added the UserNextToken argument to the context data in path AWS.IAMIdentityCenter in the aws-iam-identitycenter-list-users command.

• Added the GroupNextToken argument to the context data in path AWS.IAMIdentityCenter in the aws-iam-identitycenter-list-groups command.

• Added the GroupsUserNextToken argument to the context data in path AWS.IAMIdentityCenter.User in the aws-iam-identitycenter-list-groups-for-user command.

• Deprecated the groupName argument and replaced it with the displayName argument in the aws-iam-identitycenter-get-group command.

• Updated the following parameters to not required.

  • identityStoreId
  • roleArn
  • roleSessionName
  • accessKey
  • secretKey

• Added the credentials parameter.

• Added the roleArnCredentials parameter.

• Deprecated the aws-iam-identitycenter-remove-user-from-all-groups command and replaced it with the aws-iam-identitycenter-delete-group-membership command.

• Added the membershipId argument to the aws-iam-identitycenter-delete-group-membership command.

• Updated the emailAddress argument to not required in the aws-iam-identitycenter-get-user-by-email command.

• -

• Updated the Docker image to: demisto/boto3py3:1.0.0.94100.

Integrations

AWS - IAM Identity Center

• Added the new parameter AWS STS Regional Endpoints to specify the AWS STS endpoint resolution logic.
• Updated the Docker image to: demisto/boto3py3:1.0.0.89670.

AWS IAM Identity Center

Author: Sameh El-Hakim

With AWS IAM Identity Center (successor to AWS Single Sign-On), you can manage sign-in security for your workforce identities, also known as workforce users. IAM Identity Center provides one place where you can create or connect workforce users and manage their access centrally across all their AWS accounts and applications. IAM Identity Center is the recommended approach for workforce authentication and authorization in AWS, for organizations of any size and type.