Questions tagged [aws-sso]

In 2022, AWS Single Sign-On (AWS SSO) became AWS IAM Identity Center. As a result, please use the "aws-iam-identity-center" tag instead of the "aws-sso" tag on related posts.

78 questions
0
votes
1 answer

Adding inline policy to access S3 for AWS SSO

I have permission set created in AWS, and I am creating an INLINE policy where I want to give access to a specific bucket . when I am trying below it works fine which is something I don't want, however when add resource to like and resource arn…
0
votes
0 answers

Poetry git dependencies on AWS CodeCommit not working with SSO

I'm using poetry as my dependency manager for my python project, I've integrated external dependencies stored in a Git repository hosted on AWS CodeCommit. Since we changed our user management in AWS to SSO I can't use the git dependencies in poetry…
0
votes
0 answers

How to get Assertion Consumer Service URL in AWS IAM Identity center using AWS CLI

How to get Assertion Consumer Service URL in AWS IAM Identity center using AWS CLI?
0
votes
1 answer

AWS IAM user sso login

I'm trying to login using awscli in console with a IAM user I created Steps I followed Created the IAM user using the root user with AdministratorAccess, let's call the user james Created access keys for james and downloaded/copy them Configured…
Marco Aviles
  • 5,516
  • 6
  • 33
  • 47
0
votes
1 answer

Notify user when they are added or removed from aws sso groups

I am trying to publish two specific cloudtrail events in s3 Event names: AddMemberToGroup RemoveMemberFromGroup I am unable to find options to just store these two event logs in s3 buxket. Both logs and s3 bucket are in same account. Later I will…
0
votes
0 answers

Custom Logout URL for AWS SSO connected with External Identity via SAML

Recently started using AWS SSO for managing access to the AWS Management console. I also connected the external identity using SAML. But I wonder how I can give a custom logout URL for the AWS SSO? I can't find any documentation, which talks about…
Kumar Vivek
  • 351
  • 7
  • 30
0
votes
0 answers

I need to grant access via AWS IAM SSO Inline policy (Permission set) to particular EC2 Instance alone

I need to grant Full access via AWS IAM SSO Inline policy (Permission set) to particular EC2 Instance alone, the users should not be able to view other instances existing already, they can work on that particular instance alone only. Tried this one…
0
votes
0 answers

Private Key needed to set up Amazon IAM Identity Center (AWS SSO) on Dynatrace Managed?

I've been trying to setup AWS SSO for the on premise version of dynatrace, dynatrace managed, using the following tutorials: Source 1: https://www.dynatrace.com/support/help/manage/access-control/user-management-and-sso Source 2:…
Cosmay
  • 41
  • 6
0
votes
0 answers

Jira CodeCommit Integration using SSO credentials

We actually have an AWS federated account, so all console and service like CodeCommit access is through SSO credentials, with a duration of 24 hrs. For the Jira Plugin with Git Integration, need to be a IAM user or it can be done other way?
mair
  • 325
  • 1
  • 5
  • 14
0
votes
0 answers

setting up the alert/notification to receive an AWS account related email to other email address instead of root email

I use AWS Control Tower for the platform and have separate AWS accounts for each product. I want to create a Distribution list email for each product and link it to each respective account. I am looking to direct AWS notification emails to a…
0
votes
0 answers

is it possible to use email id when login to aws sso(connected with microsoft AD) instead of using AD domain id

I have created one AWS SSO and connected with AWS Managed Microsoft Active Directory, after that I created few users and able to login to AWS SSO using Microsoft AD domain id's like john@corp.example.com but, I am not able to use my Gmail id to…
JANARDHAN
  • 41
  • 3
0
votes
1 answer

Allocate AWS SSO Permission Set to Groups in Accounts

Working to fully code the aws sso set up So far coded via Terraform I have all permission-sets and using scim to pull in groups. Allocation of the permission sets to groups in accounts (I have over 100 accounts) is done by hand. I want to allocate…
BobMonk
  • 178
  • 1
  • 10
0
votes
0 answers

Difference between AWS IAM & AWS SSO? What are all to be careful before we opt for AWS SSO

I'm currently using AWS IAM to provision access to the AWS resources for the users. Recently I created an AWS Organization to separate the Dev & Prod environments. While doing this I supposed to create another IAM user for all users for the Dev AWS…
S A R
  • 146
  • 3
  • 20
0
votes
0 answers

AWS Allow Federated User cross account SAML-Federated access

I have our IAM Identity Center SSO set up at our AWS organization. Our team uses SSO to switch different accounts through the console or programmatic access. My question is how to allow our script can access AWS resources in Account A and Account B…
0
votes
1 answer

MongoDB Atlas role mappings not working when using AWS single-sign on as the identity provider

I've setup our AWS SSO (IAM Identity Centre) to provide federated authentication to our MongoDB Atlas organisation by using the AWS built-in MongoDB application within AWS SSO. I've also setup role mappings by following…