AWS Identity Center

Instructions d'utilisation

Provision and revoke temporary access to AWS accounts via IAM Identity Center (SSO). Assign permission sets to users or groups, look up users by email, and list accounts and permission sets for access request workflows.

Outils

`identity_center_list_instances`

List all AWS IAM Identity Center instances in your account

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`maxResults`	number	Non	Maximum number of instances to return (1-100)
`nextToken`	string	Non	Pagination token from a previous request

Sortie

Paramètre	Type	Description
`instances`	json	List of Identity Center instances with instanceArn, identityStoreId, name, status, statusReason
`nextToken`	string	Pagination token for the next page of results
`count`	number	Number of instances returned

`identity_center_list_accounts`

List all AWS accounts in your organization

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`maxResults`	number	Non	Maximum number of accounts to return
`nextToken`	string	Non	Pagination token from a previous request

Sortie

Paramètre	Type	Description
`accounts`	json	List of AWS accounts with id, arn, name, email, status
`nextToken`	string	Pagination token for the next page of results
`count`	number	Number of accounts returned

`identity_center_describe_account`

Retrieve details about a specific AWS account by its ID

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`accountId`	string	Oui	AWS account ID to describe

Sortie

Paramètre	Type	Description
`id`	string	AWS account ID
`arn`	string	AWS account ARN
`name`	string	Account name
`email`	string	Root email address of the account
`status`	string	Account status (ACTIVE, SUSPENDED, etc.)
`joinedTimestamp`	string	Date the account joined the organization

`identity_center_list_permission_sets`

List all permission sets defined in an IAM Identity Center instance

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`instanceArn`	string	Oui	ARN of the Identity Center instance
`maxResults`	number	Non	Maximum number of permission sets to return
`nextToken`	string	Non	Pagination token from a previous request

Sortie

Paramètre	Type	Description
`permissionSets`	json	List of permission sets with permissionSetArn, name, description, sessionDuration
`nextToken`	string	Pagination token for the next page of results
`count`	number	Number of permission sets returned

`identity_center_get_user`

Look up a user in the Identity Store by email address

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`identityStoreId`	string	Oui	Identity Store ID (from the Identity Center instance)
`email`	string	Oui	Email address of the user to look up

Sortie

Paramètre	Type	Description
`userId`	string	Identity Store user ID (use as principalId)
`userName`	string	Username in the Identity Store
`displayName`	string	Display name of the user
`email`	string	Email address of the user

`identity_center_get_group`

Look up a group in the Identity Store by display name

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`identityStoreId`	string	Oui	Identity Store ID (from the Identity Center instance)
`displayName`	string	Oui	Display name of the group to look up

Sortie

Paramètre	Type	Description
`groupId`	string	Identity Store group ID (use as principalId)
`displayName`	string	Display name of the group
`description`	string	Group description

`identity_center_list_groups`

List all groups in the Identity Store

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`identityStoreId`	string	Oui	Identity Store ID (from the Identity Center instance)
`maxResults`	number	Non	Maximum number of groups to return
`nextToken`	string	Non	Pagination token from a previous request

Sortie

Paramètre	Type	Description
`groups`	json	List of groups with groupId, displayName, description
`nextToken`	string	Pagination token for the next page of results
`count`	number	Number of groups returned

`identity_center_create_account_assignment`

Grant a user or group access to an AWS account via a permission set (temporary elevated access)

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`instanceArn`	string	Oui	ARN of the Identity Center instance
`accountId`	string	Oui	AWS account ID to grant access to
`permissionSetArn`	string	Oui	ARN of the permission set to assign
`principalType`	string	Oui	Type of principal: USER or GROUP
`principalId`	string	Oui	Identity Store ID of the user or group

Sortie

Paramètre	Type	Description
`message`	string	Status message
`status`	string	Provisioning status: IN_PROGRESS, FAILED, or SUCCEEDED
`requestId`	string	Request ID to use with Check Assignment Status
`accountId`	string	Target AWS account ID
`permissionSetArn`	string	Permission set ARN
`principalType`	string	Principal type (USER or GROUP)
`principalId`	string	Principal ID
`failureReason`	string	Reason for failure if status is FAILED
`createdDate`	string	Date the request was created

`identity_center_delete_account_assignment`

Revoke a user or group access to an AWS account by removing a permission set assignment

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`instanceArn`	string	Oui	ARN of the Identity Center instance
`accountId`	string	Oui	AWS account ID to revoke access from
`permissionSetArn`	string	Oui	ARN of the permission set to remove
`principalType`	string	Oui	Type of principal: USER or GROUP
`principalId`	string	Oui	Identity Store ID of the user or group

Sortie

Paramètre	Type	Description
`message`	string	Status message
`status`	string	Deprovisioning status: IN_PROGRESS, FAILED, or SUCCEEDED
`requestId`	string	Request ID to use with Check Assignment Status
`accountId`	string	Target AWS account ID
`permissionSetArn`	string	Permission set ARN
`principalType`	string	Principal type (USER or GROUP)
`principalId`	string	Principal ID
`failureReason`	string	Reason for failure if status is FAILED
`createdDate`	string	Date the request was created

`identity_center_check_assignment_status`

Check the provisioning status of an account assignment creation request

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`instanceArn`	string	Oui	ARN of the Identity Center instance
`requestId`	string	Oui	Request ID returned from Create or Delete Account Assignment

Sortie

Paramètre	Type	Description
`message`	string	Human-readable status message
`status`	string	Current status: IN_PROGRESS, FAILED, or SUCCEEDED
`requestId`	string	The request ID that was checked
`accountId`	string	Target AWS account ID
`permissionSetArn`	string	Permission set ARN
`principalType`	string	Principal type (USER or GROUP)
`principalId`	string	Principal ID
`failureReason`	string	Reason for failure if status is FAILED
`createdDate`	string	Date the request was created

`identity_center_check_assignment_deletion_status`

Check the deprovisioning status of an account assignment deletion request

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`instanceArn`	string	Oui	ARN of the Identity Center instance
`requestId`	string	Oui	Request ID returned from Delete Account Assignment

Sortie

Paramètre	Type	Description
`message`	string	Human-readable status message
`status`	string	Current deletion status: IN_PROGRESS, FAILED, or SUCCEEDED
`requestId`	string	The deletion request ID that was checked
`accountId`	string	Target AWS account ID
`permissionSetArn`	string	Permission set ARN
`principalType`	string	Principal type (USER or GROUP)
`principalId`	string	Principal ID
`failureReason`	string	Reason for failure if status is FAILED
`createdDate`	string	Date the request was created

`identity_center_list_account_assignments`

List all account assignments for a specific user or group across all accounts

Entrée

Paramètre	Type	Obligatoire	Description
`region`	string	Oui	AWS region (e.g., us-east-1)
`accessKeyId`	string	Oui	AWS access key ID
`secretAccessKey`	string	Oui	AWS secret access key
`instanceArn`	string	Oui	ARN of the Identity Center instance
`principalId`	string	Oui	Identity Store ID of the user or group
`principalType`	string	Oui	Type of principal: USER or GROUP
`maxResults`	number	Non	Maximum number of assignments to return
`nextToken`	string	Non	Pagination token from a previous request

Sortie

Paramètre	Type	Description
`assignments`	json	List of account assignments with accountId, permissionSetArn, principalType, principalId
`nextToken`	string	Pagination token for the next page of results
`count`	number	Number of assignments returned

AWS Identity Center

On this page