You're reading from Implementing Identity Management on AWS A real-world guide to solving customer and workforce IAM challenges in your AWS cloud environments

Product type Paperback

Published in Oct 2021

Publisher Packt

ISBN-13 9781800562288

Length 504 pages

Edition 1st Edition

Tools

AWS

Concepts

Identity Management

Author (1):

Jon Lehtinen

View More author details

Table of Contents (17) Chapters

Preface

1. Section 1: IAM and AWS – Critical Concepts, Definitions, and Tools

2. Chapter 1: An Introduction to IAM and AWS IAM Concepts FREE CHAPTER

3. Chapter 2: An Introduction to the AWS CLI

4. Chapter 3: IAM User Management

5. Chapter 4: Access Management, Policies, and Permissions

6. Chapter 5: Introducing Amazon Cognito

7. Chapter 6: Introduction to AWS Organizations and AWS Single Sign-On

8. Chapter 7: Other AWS Identity Services

9. Section 2: Implementing IAM on AWS for Administrative Use Cases

10. Chapter 8: An Ounce of Prevention – Planning Your Administrative Model

11. Chapter 9: Bringing Your Admins into the AWS Administrative Backplane

12. Chapter 10: Administrative Single Sign-On to the AWS Backplane

13. Section 3: Implementing IAM on AWS for Application Use Cases

14. Chapter 11: Bringing Your Users into AWS

15. Chapter 12: AWS-Hosted Application Single Sign-On Using an Existing Identity Provider

16. Other Books You May Enjoy

Configuring AWS SSO from the CLI

We usually tear down what we have built in the Management Console to address the steps to recreate it from the CLI. However, this is a situation where AWS Organizations and AWS SSO's tight coupling already addressed many of the initial creation steps required to begin the tasks that we would perform from the AWS SSO service. We functionally already created a new AWS SSO service and identity store when we created an AWS organization using the command line. What is left to us to do with the CLI involves user assignment to member accounts. As such, to get a full picture of how to create an AWS SSO instance from scratch, refer back to the AWS Organization in the AWS CLI section earlier in this chapter.

The CLI does not have many options for account management for the identity store. Unlike Amazon Cognito, which is a full-featured platform for application identity use cases, AWS SSO uses the identity store primarily as its attribute and credential...