Aws configure sso

• https://awscli.amazonaws.com/v2/documentation/api/2.13.0/reference/configure/sso.html

aws configure sso
aws configure sso --profile

Examples

aws configure sso
SSO start URL [None]: https://d-123456789.awsapps.com/start#/
Attempting to automatically open the SSO authorization page in your default browser.
If the browser does not open or you wish to use a different device to authorize this request, open the following URL:

https://device.sso.eu-central-1.amazonaws.com/

Then enter the code:

RRWD-JTTN
There are 8 AWS accounts available to you.
Using the account ID 0987654321
There are 2 roles available to you.
Using the role name "AdministratorAccess"
CLI default client Region [None]: eu-central-1
CLI default output format [None]:
CLI profile name [AWSAdministratorAccess-0987654321]:

To use this profile, specify the profile name using --profile, as shown:

aws s3 ls --profile AdministratorAccess-0987654321

Others:

.../...
The only AWS account available to you is: XXXXXX

Errors

An error occurred (InvalidRequestException) when calling the StartDeviceAuthorization operation

Solution: make sure your URL contains: /start#/ at the end of the request.

An error occurred (InvalidAccessKeyId) when calling the ListBuckets operation: The AWS Access Key Id you provided does not exist in our records.

Related

• aws sts get-federation-token
• Configure the AWS CLI to use AWS IAM Identity Center
• AWS access portal
• ~/.aws/credentials
• aws configure sso-session

See also

• InvalidAccessKeyId
• aws configure sso, ~/.aws/sso/cache, ~/.aws/credentials, aws configure sso-session, aws sso login
• AWS IAM Identity Center, aws identitystore, AWS Identity Center directory, SSO
• AWS users: AWS IAM users and/or Identity Center users