CuraDevOps

tag: Identity-Management · 5 items

Plan AWS IAM Identity Center Identity Store gains EventBridge change notifications
2026-10-29 · AWS What's New · source ↗ #aws#iam#identity-management
  • Platform/SRE — Plan: New GA capability lets platform teams build automated identity lifecycle workflows — audit Lambda functions, SIEM alerts, or downstream access revocation triggered by group/user changes. Worth incorporating into identity management automation this quarter if IAM Identity Center is the identity source.
  • CI/CD — Skip
  • Leader — Learn: EventBridge-driven identity change events can strengthen automated compliance and audit posture for organizations managing large workforces in AWS; no strategic vendor or cost decision required, but informs thinking on identity automation capabilities.
Learn GitHub EMU accounts incorrectly deleted instead of suspended (June 1–13)
2026-10-24 · GitHub Changelog · source ↗ #github-enterprise#identity-management#emu
  • Platform/SRE — Skip
  • CI/CD — Skip
  • Leader — Learn: If your org uses GitHub Enterprise Managed Users, review whether any accounts were incorrectly deleted (rather than suspended) during June 1–13, 2026 via SCIM deprovisioning — particularly any service or bot accounts your teams rely on.
Plan AWS IAM Identity Center now preserves identities when migrating from AD
2026-10-21 · AWS What's New · source ↗ #aws-iam#identity-management#active-directory
  • Platform/SRE — Plan: New GA capability removes a major operational barrier: migrating IAM Identity Center from Active Directory to an external IdP (Okta, Entra ID) no longer requires recreating users, groups, and permission assignments. If an AD-to-IdP identity migration is on the roadmap, schedule an evaluation of this simplified path.
  • CI/CD — Skip
  • Leader — Learn: This lowers the migration cost for orgs considering a shift from on-prem AD to a cloud IdP as their AWS identity source — a previously high-friction strategic move is now substantially simpler, which may shift the build-vs-buy calculus for identity infrastructure.
Plan AWS IAM Identity Center adds optimistic locking to identity store API
2026-10-20 · AWS What's New · source ↗ #aws-iam#identity-management#access-control
  • Platform/SRE — Plan: If you have automation or multiple admins modifying IAM Identity Center users/groups (via SCIM, AD sync, or API), adopt the new Revision parameter on update/delete calls to prevent silent overwrites; no deadline, but worth scheduling for any identity-management automation this quarter.
  • CI/CD — Skip
  • Leader — Skip
Plan archived AWS IAM launches account access manager for workforce role assignment
2026-08-12 · AWS What's New · source ↗ #aws-iam#identity-management#cloud-access
  • Platform/SRE — Plan: This new GA feature unifies IAM role flexibility with IAM Identity Center federation, replacing the previous two-approach trade-off. Platform engineers managing AWS workforce access should evaluate adopting account access manager as their standard approach this quarter — no migration deadline exists, but it simplifies ongoing access architecture.
  • CI/CD — Skip
  • Leader — Learn: AWS now offers a third path for workforce federation that combines centralized user awareness with per-account IAM role granularity. Worth knowing as context when reviewing org-wide AWS access standards, but no licensing, pricing, or vendor-risk decision is triggered.