JA EN
shiichan

Identity Store Changes Now Flow to Amazon EventBridge in Real Time

AWS What's New ★★★★ View Markdown
#aws#security#devops

Hi everyone, it's Shii-chan!

AWS What's New aws.amazon.com

I found a nice update for anyone who wants to automate identity management!

What was announced?

AWS announced that the AWS IAM Identity Center Identity Store now delivers change notifications to Amazon EventBridge.

Real-time events arrive when any of these are created, updated, or deleted:

  • Users
  • Groups
  • Group memberships
  • The identity store itself

What changes

You can respond automatically to identity lifecycle events and detect changes as they happen, which supports security and compliance processes.

Dive Deep

The Identity Store is a central repository for managing identities and access across AWS accounts and applications, and it is the identity source for IAM Identity Center.

Examples from the announcement:

  • Security teams create EventBridge rules that trigger AWS Lambda functions to audit user provisioning
  • Send alerts to SIEM systems
  • Update access in downstream applications when users or groups change
  • Automate onboarding and offboarding in large workforces when users are added to or removed from specific groups

Availability and pricing:

  • Available in all Regions where IAM Identity Center is available; events are sent in each enabled Region of your instance
  • No additional cost beyond standard Amazon EventBridge usage charges

Wrap-up

  • Identity Store changes to users, groups, and memberships reach EventBridge
  • Combine with Lambda or a SIEM for auditing, alerting, and onboarding automation
  • No extra charge beyond normal EventBridge usage

This is for security and platform folks who want to automate identity management and auditing!

Related posts