Difference between revisions of "AWS IAM Identity Center"
Jump to navigation
Jump to search
↑ https://aws.amazon.com/about-aws/whats-new/2022/07/aws-single-sign-on-aws-sso-now-aws-iam-identity-center/
Line 25: | Line 25: | ||
* <code>[[aws sso-admin]]</code> | * <code>[[aws sso-admin]]</code> | ||
* [[ssoins]] | * [[ssoins]] | ||
+ | * <code>[[AdministratorAccess]]</code> | ||
== Activities == | == Activities == |
Revision as of 13:43, 11 February 2024
wikipedia:AWS IAM Identity Center (Jul 2022) [1] (previously AWS Single Sign-On)
- https://aws.amazon.com/iam/identity-center/
- Pricing: Free of charge
- Enable multi-account access to your AWS accounts
- Enable single sign-on access to your AWS applications
- Enable single sign-on access to Amazon EC2 Windows instances
Commands
Terraform resources
Related
- Okta https://www.okta.com/blog/2020/05/how-okta-aws-iam-identity-center-simplifies-admin-and-adds-cli-support/
- JumpCloud
SCIM
protocol, Created by SCIM- Permission sets:
AdministratorAccess, PowerUserAccess
aws_ssoadmin_permission_set
- Maximum session duration, up to 7 days or custom duration.
- AWS access portal:
aws sso-admin
- ssoins
AdministratorAccess
Activities
- Configure the AWS CLI to use AWS IAM Identity Center. See also: AWS SSO token provider configuration https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html
See also
- AWS STS
(sts:)
,aws sts
[get-session-token
|get-caller-identity
|assume-role | assume-role-with-web-identity | assume-role-with-saml | get-access-key-info ]
- AWS IAM Identity Center:
aws identitystore [ create-user | create-group | list-groups | list-users ]
, Permission sets - AWS IAM Identity Center, AWS SSO,
aws sso
, AWS access portal,aws_ssoadmin_permission_set, arn:aws:sso
- IAM: AWS IAM Identity Center, AWS Identity and Access Management, Google Cloud IAM, Azure IAM, SailPoint, CyberArk, CIAM, ForgeRock,
iam:ChangePassword
,aws iam
,AdministratorAccess
, Context keys, IAM Access Analyzer, AWS policy, AWS managed policies,IAMUserChangePassword
, AWS Roles, List of AWS policies, Resource-based policy,aws-iam-authenticator
, IRSA, RDS Authentication,AccessDenied
, AWS Authentication, AWS IAM external access analyzer
Advertising: