identitystore:UpdateIdentityStore

Write

identitystore:UpdateIdentityStore is a Write access-level action in the identitystore service. Grants permission to update the configuration of an IdentityStore

Resource types

ARNs that identitystore:UpdateIdentityStore can be scoped to in an IAM policy.

arn:${Partition}:identitystore::${Account}:identitystore/${IdentityStoreId} required
Identitystore

Condition keys

Keys you can use in the Condition block of a policy that grants identitystore:UpdateIdentityStore.

identitystore:VpceAccessRequired Bool

Filters access by whether the Identity Store requires access through a VPC endpoint

Example IAM policy

A minimal policy that allows identitystore:UpdateIdentityStore. Replace "Resource": "*" with a specific ARN to follow least privilege.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowIdentitystoreUpdateIdentityStore",
      "Effect": "Allow",
      "Action": "identitystore:UpdateIdentityStore",
      "Resource": "*"
    }
  ]
}

Related actions in identitystore

View all identitystore actions →