AWS IAM Identity Center's Identity Store now supports change notifications through Amazon EventBridge

AWS IAM Identity Center Identity Store

AWS IAM Identity Center's Identity Store now delivers real-time events to Amazon EventBridge when users, groups, or group memberships or the identity store itself is created, updated, or deleted. This new capability helps you automatically respond to identity lifecycle events and support your security and compliance processes by detecting changes as they happen.

With Identity Store change notifications, you can build automated workflows that respond to identity changes in your organization. For example, security teams can create EventBridge rules that trigger AWS Lambda functions to audit user provisioning activity, send alerts to security information and event management (SIEM) systems, or update access in downstream applications when users or groups change. Organizations that manage large workforces can also use this data to automate onboarding and offboarding when users are added to or removed from specific groups.

What to do

• Create EventBridge rules to trigger AWS Lambda functions for auditing and alerting.
• Update access in downstream applications when users or groups change.
• Automate onboarding and offboarding processes.

Change notifications are available in all AWS Regions where IAM Identity Center is available, and events are sent in each enabled Region of your instance. Change notifications are available at no additional cost beyond standard Amazon EventBridge usage charges.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.