Skip to content
Identity and Access Management

09 March 2026

Production release: 09 March 2026
Staging release: 02 March 2026

09 March 2026

Section titled “09 March 2026”

Features

Section titled “Features”

  • Create Group Resolver for Users: Group resolvers implemented to handle user groups using the list_groups_of_user from the Group service.

  • Create Group Resolver for Accounts: Group resolvers implemented to handle account groups using the list_groups from the Group service.

  • Create Apollo Code for Group Resolver: Added group resolvers to Apollo server for handling GQL requests related to groups.

  • List Team with Application AZP Filter: Teams created by specific applications are now filtered using the token AZP.

  • IAM API - Cancel Self Join Request: Added functionality to cancel self-join requests from the “My Teams” page.

  • Search Device with Serial Number: Devices can now be searched using only a serial number, with routing logic leveraging Amazon OpenSearch Service for non-unique lookups.

  • Handle Managed Users in CDH Reverse Sync: Managed users without email are implicitly considered in a COMMITTED state during reverse sync.

  • Skip Mail Option for Cancel Invite: Added an option to skip sending cancellation emails when an invitation is canceled.

  • Opensearch One-Time Migration for Device Data: Migrated device and device-account relationship data from DynamoDB to OpenSearch to enable sorting capabilities.

  • TID-IAM Sync: Introduced X-SRC header in IAM to identify the origin of user updates and prevent unnecessary re-routing.

  • SRE - Support Deployment of AppSync Alternate Implementation: Supported deployment of AppSync alternate implementation.

  • Skip Org Enrichment Private Fields in Analytics Events: Internal fields like _matchQuality in organization enrichment data are now skipped in analytics events.

  • Adding Account Information in ListGroup API: Enhanced the ListGroup API to include account information.

  • Create Group Resolver for Groups: Group resolvers implemented to handle groups.

  • Add Remaining Roles/Permissions Resolvers to Apollo Server: Added resolvers for roles and permissions to Apollo server.

  • Add Remaining User BLU Resolvers to Apollo Server: Added resolvers for user-related queries to Apollo server.

  • IAM Resource-Type in TRN Updated to Plural: Updated resource-type in TRN to plural to match resource paths, ensuring compliance with guidelines.

  • Central DDB Table Read Request Throttling Mitigated: Addressed read request throttling in the central DynamoDB table to prevent API failures with HTTP 502 errors.

  • Monitoring for IAM Devices AOSS LiveSync Setup: Alerts created for Lambda and SQS to monitor the AOSS LiveSync setup.

  • Entity Migration - Infra Cleanup in Staging and Production: Regional data cleanup performed in staging and production environments.

  • Add Logging for User-Account Reverse Sync with No Roles: Log messages added to detail outcomes of reverse sync processes when executed without roles.

Bug Fixes

Section titled “Bug Fixes”

  • Update Account Sync to Respect OSR Feature Flag: Fixed issue where updates applied the OSR solution even when the OSR feature flag was set to false.

  • SKU Lambda Config Variables Issue Resolved: Fixed deployment failure caused by missing KMS ID in SAM files for the Device SKU Synchronizer.

  • Random 404 - Resource Not Found Error Fixed: Addressed intermittent 404 errors encountered while creating sub-groups under parent groups.

  • Data Region Entry for Users Standardized to Lowercase: Ensured data region entries for users in the central table are always in lowercase to prevent TRN generation failures.

  • Org Bulk Enrichment - Dealer Account Association Issue Fixed: Resolved issue where dealer account associations were not created for bulk enrichment inputs with multiple pipe-delimited values.

  • Group Approval Flow Enhanced: Added email template validation and reverted relation creation for incorrect inputs.

  • List Groups API Updated: Moved account ID in the payload to the relation block for better consistency.

  • TID/IAM Audit Log POST API Created: Enabled TID to write to IAM’s audit log via a new POST API endpoint.

  • Update Status as CANCELLED for Cancelled Invites: Fixed issue where canceled invitations remained in PENDING state in user-account relations.

  • Sorting Capability for List Devices Added: Enabled sorting of device lists based on owner and model name.

These updates enhance system functionality, improve user experience, and address critical bugs.