AWS IAM Identity Center, which manages single sign-on user and group data via the Identity Store, introduced optional network access controls to restrict API access by source VPC endpoints or specific IP ranges. Separate policies can be applied distinctly to Identity Store and SCIM APIs, enabling fine-grained network security.
This capability strengthens privacy and control over automated provisioning and synchronization workflows by limiting connections to trusted network locations. Network controls are configurable through Identity Store APIs and are active across all AWS Regions where the service is available, with exception for AWS service calls on customers’ behalf.
Source & further reading
AWS IAM Identity Center now supports network access controls for Identity Store ↗Source published 2026-10-05. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.