AWS IAM Identity Center Identity Store APIs now accept resource ARNs in addition to resource IDs

AWS IAM Identity Center Updates

AWS IAM Identity Center's Identity Store APIs now accept the Amazon Resource Name (ARN) for a user, group, group membership, or identity store in place of the resource ID. This change simplifies application code and eliminates potential parsing errors.

If you build on the Identity Store APIs, you can now pass either the ARN or resource ID directly. This applies to all request identifier fields across the Identity Store API surface. Responses continue to return resource IDs as before. Malformed or wrong-resource-type ARNs return a ValidationException.

What to do

• Update your application code to accept ARNs in addition to resource IDs for Identity Store API requests.
• Test your integrations to ensure they handle ARNs correctly.
• Review your error handling to manage ValidationExceptions resulting from malformed or wrong-resource-type ARNs.

This capability is available in all AWS Regions where AWS IAM Identity Center is offered, at no additional cost. To learn more, see the Identity Store API Reference.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.