AWS IAM Identity Center
(sso)
IAM Changes
Services
2026-07-15
2026-07-15
71 updated actions
Updates
Actions
CreateApplication
Conditions
- sso:PrimaryRegion
CreateApplicationAssignment
Conditions
- sso:PrimaryRegion
CreatePermissionSet
Conditions
- sso:PrimaryRegion
CreateTrustedTokenIssuer
Conditions
- sso:PrimaryRegion
DeleteApplication
Conditions
- sso:PrimaryRegion
DeleteApplicationAccessScope
Conditions
- sso:PrimaryRegion
DeleteApplicationAssignment
Conditions
- sso:PrimaryRegion
DeleteApplicationAuthenticationMethod
Conditions
- sso:PrimaryRegion
DeleteApplicationGrant
Conditions
- sso:PrimaryRegion
DescribeApplication
Conditions
- sso:PrimaryRegion
DescribeApplicationAssignment
Conditions
- sso:PrimaryRegion
GetApplicationAccessScope
Conditions
- sso:PrimaryRegion
GetApplicationAssignmentConfiguration
Conditions
- sso:PrimaryRegion
GetApplicationAuthenticationMethod
Conditions
- sso:PrimaryRegion
GetApplicationGrant
Conditions
- sso:PrimaryRegion
GetApplicationSessionConfiguration
Conditions
- sso:PrimaryRegion
ListApplicationAccessScopes
Conditions
- sso:PrimaryRegion
ListApplicationAssignments
Conditions
- sso:PrimaryRegion
ListApplicationAssignmentsForPrincipal
Conditions
- sso:PrimaryRegion
ListApplicationAuthenticationMethods
Conditions
- sso:PrimaryRegion
ListApplicationGrants
Conditions
- sso:PrimaryRegion
PutApplicationAccessScope
Conditions
- sso:PrimaryRegion
PutApplicationAssignmentConfiguration
Conditions
- sso:PrimaryRegion
PutApplicationAuthenticationMethod
Conditions
- sso:PrimaryRegion
PutApplicationGrant
Conditions
- sso:PrimaryRegion
PutApplicationSessionConfiguration
Conditions
- sso:PrimaryRegion
UpdateApplication
Conditions
- sso:PrimaryRegion
AddRegion
Conditions
- sso:PrimaryRegion
AttachCustomerManagedPolicyReferenceToPermissionSet
Conditions
- sso:PrimaryRegion
AttachManagedPolicyToPermissionSet
Conditions
- sso:PrimaryRegion
CreateAccountAssignment
Conditions
- sso:PrimaryRegion
CreateInstanceAccessControlAttributeConfiguration
Conditions
- sso:PrimaryRegion
DeleteAccountAssignment
Conditions
- sso:PrimaryRegion
DeleteInlinePolicyFromPermissionSet
Conditions
- sso:PrimaryRegion
DeleteInstance
Conditions
- sso:PrimaryRegion
DeleteInstanceAccessControlAttributeConfiguration
Conditions
- sso:PrimaryRegion
DeletePermissionSet
Conditions
- sso:PrimaryRegion
DeletePermissionsBoundaryFromPermissionSet
Conditions
- sso:PrimaryRegion
DeleteTrustedTokenIssuer
Conditions
- sso:PrimaryRegion
DescribeAccountAssignmentCreationStatus
Conditions
- sso:PrimaryRegion
DescribeAccountAssignmentDeletionStatus
Conditions
- sso:PrimaryRegion
DescribeInstance
Conditions
- sso:PrimaryRegion
DescribeInstanceAccessControlAttributeConfiguration
Conditions
- sso:PrimaryRegion
DescribePermissionSet
Conditions
- sso:PrimaryRegion
DescribePermissionSetProvisioningStatus
Conditions
- sso:PrimaryRegion
DescribeRegion
Conditions
- sso:PrimaryRegion
DescribeTrustedTokenIssuer
Conditions
- sso:PrimaryRegion
DetachCustomerManagedPolicyReferenceFromPermissionSet
Conditions
- sso:PrimaryRegion
DetachManagedPolicyFromPermissionSet
Conditions
- sso:PrimaryRegion
GetInlinePolicyForPermissionSet
Conditions
- sso:PrimaryRegion
GetPermissionsBoundaryForPermissionSet
Conditions
- sso:PrimaryRegion
ListAccountAssignmentCreationStatus
Conditions
- sso:PrimaryRegion
ListAccountAssignmentDeletionStatus
Conditions
- sso:PrimaryRegion
ListAccountAssignments
Conditions
- sso:PrimaryRegion
ListAccountAssignmentsForPrincipal
Conditions
- sso:PrimaryRegion
ListAccountsForProvisionedPermissionSet
Conditions
- sso:PrimaryRegion
ListCustomerManagedPolicyReferencesInPermissionSet
Conditions
- sso:PrimaryRegion
ListManagedPoliciesInPermissionSet
Conditions
- sso:PrimaryRegion
ListPermissionSetProvisioningStatus
Conditions
- sso:PrimaryRegion
ListPermissionSets
Conditions
- sso:PrimaryRegion
ListPermissionSetsProvisionedToAccount
Conditions
- sso:PrimaryRegion
ListRegions
Conditions
- sso:PrimaryRegion
ListTrustedTokenIssuers
Conditions
- sso:PrimaryRegion
ProvisionPermissionSet
Conditions
- sso:PrimaryRegion
PutInlinePolicyToPermissionSet
Conditions
- sso:PrimaryRegion
PutPermissionsBoundaryToPermissionSet
Conditions
- sso:PrimaryRegion
RemoveRegion
Conditions
- sso:PrimaryRegion
UpdateInstance
Conditions
- sso:PrimaryRegion
UpdateInstanceAccessControlAttributeConfiguration
Conditions
- sso:PrimaryRegion
UpdatePermissionSet
Conditions
- sso:PrimaryRegion
UpdateTrustedTokenIssuer
Conditions
- sso:PrimaryRegion