AWS IAM Identity Center

wikipedia:AWS IAM Identity Center (Jul 2022) (previously AWS Single Sign-On)

• https://aws.amazon.com/iam/identity-center/
• Pricing: Free of charge

• Enable multi-account access to your AWS accounts
• Enable single sign-on access to your AWS applications
• Enable single sign-on access to Amazon EC2 Windows instances

Commands

• aws sts get-session-token
• aws sts assume-role

Terraform resources

• aws_identitystore_user
• aws_identitystore_group

Related

• Okta https://www.okta.com/blog/2020/05/how-okta-aws-iam-identity-center-simplifies-admin-and-adds-cli-support/
• JumpCloud
• SCIM protocol, Created by SCIM
• Permission sets: AdministratorAccess, PowerUserAccess
• aws_ssoadmin_permission_set
• Maximum session duration, up to 7 days or custom duration.
• AWS access portal:
• aws sso-admin
• ssoins
• AdministratorAccess
• arn:aws:sso:::permissionSet

Activities

• Configure the AWS CLI to use AWS IAM Identity Center. See also: AWS SSO token provider configuration https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html

See also

• AWS STS (sts:), aws sts [ get-session-token | get-caller-identity | assume-role | assume-role-with-web-identity | assume-role-with-saml | get-access-key-info ]
• AWS IAM Identity Center: aws identitystore [ create-user | create-group | list-groups | list-users ], Permission sets
• AWS IAM Identity Center, AWS SSO, aws sso, AWS access portal, aws_ssoadmin_permission_set, arn:aws:sso
• IAM: AWS IAM Identity Center, AWS Identity and Access Management, Google Cloud IAM, Azure IAM, SailPoint, CyberArk, CIAM, ForgeRock, iam:ChangePassword, aws iam, AdministratorAccess, Context keys, IAM Access Analyzer, AWS policy, AWS managed policies, IAMUserChangePassword, AWS Roles, List of AWS policies, Resource-based policy, aws-iam-authenticator, IRSA, RDS Authentication, AccessDenied, AWS Authentication, AWS IAM external access analyzer

https://aws.amazon.com/about-aws/whats-new/2022/07/aws-single-sign-on-aws-sso-now-aws-iam-identity-center/