Amazon Identity Store now supports change notifications through Amazon EventBridge
Amazon Identity Store now delivers real-time events to Amazon EventBridge when users, groups, or group memberships or the identity store itself are created, updated, or deleted.
Amazon Identity Store is a central repository that allows you to manage identities and access across Amazon Web Services accounts and applications, serving as the identity source for Amazon IAM Identity Center. This new capability helps you automatically respond to identity lifecycle events and support your security and compliance processes by detecting changes as they happen.
With Identity Store change notifications, you can build automated workflows that respond to identity changes in your organization. For example, security teams can create EventBridge rules that trigger Amazon Lambda functions to audit user provisioning activity, send alerts to security information and event management (SIEM) systems, or update access in downstream applications. Organizations that manage large workforces can also automate onboarding and offboarding when users are added to or removed from specific groups.
Change notifications are available in the Amazon Web Services China (Beijing) Region, operated by Sinnet, and the Amazon Web Services China (Ningxia) Region, operated by NWCD. Change notifications are available at no additional cost beyond standard Amazon EventBridge usage charges. To learn more, see EventBridge integration in the Amazon IAM Identity Center User Guide and Identity Store events in the Amazon EventBridge Events Reference.