AWS Identity Center

Overview

Provision and revoke temporary access to AWS accounts via IAM Identity Center (SSO). Assign permission sets to users or groups, look up users by email, and list accounts and permission sets for access request workflows.

How to automate AWS Identity Center with SteelEngine

1. 01

   Create a free account

   Sign up at steelengine.com in seconds. No credit card required. Your workspace is ready immediately.

2. 02

   Add a AWS Identity Center block

   Open a workflow, drag a AWS Identity Center block onto the canvas, and authenticate your account.

3. 03

   Configure, connect, and run

   Pick the tool you need, wire in an AI agent for reasoning or data transformation, and run. Your AWS Identity Center automation is live.

Supported tools

12 AWS Identity Center tools available in SteelEngine

• List Instances

  List all AWS IAM Identity Center instances in your account

• List Accounts

  List all AWS accounts in your organization

• Describe Account

  Retrieve details about a specific AWS account by its ID

• List Permission Sets

  List all permission sets defined in an IAM Identity Center instance

• Get User

  Look up a user in the Identity Store by email address

• Get Group

  Look up a group in the Identity Store by display name

• List Groups

  List all groups in the Identity Store

• Create Account Assignment

  Grant a user or group access to an AWS account via a permission set (temporary elevated access)

• Delete Account Assignment

  Revoke a user or group access to an AWS account by removing a permission set assignment

• Check Assignment Status

  Check the provisioning status of an account assignment creation request

• Check Assignment Deletion Status

  Check the deprovisioning status of an account assignment deletion request

• List Account Assignments

  List all account assignments for a specific user or group across all accounts

Frequently asked questions