Can "AWS IAM Identity Center" be used to access APIs without running "aws configure sso" every other time?

0

I'm referring to this article: https://docs.aws.amazon.com/cli/latest/userguide/sso-configure-profile-token.html

Do I understand correctly that I'll need to run "aws configure sso" every hour/12 hours anyway?

feita há 10 meses237 visualizações
1 Resposta
1

Hi, yes, you to need refresh with a new aws sso login each time the session duration that you defined is reached.

See https://docs.aws.amazon.com/singlesignon/latest/userguide/howtosessionduration.html

For each permission set, you can specify a session duration to control the length of time 
that a user can be signed in to an AWS account. When the specified duration elapses, 
AWS signs the user out of the session.

When you create a new permission set, the session duration is set to 1 hour (in seconds) 
by default. The minimum session duration is 1 hour, and can be set to a maximum of 12 hours.
 IAM Identity Center automatically creates IAM roles in each assigned account for each permission 
set, and configures these roles with a maximum session duration of 12 hours.

I would also suggest reading https://ben11kehoe.medium.com/you-only-need-to-call-aws-sso-login-once-for-all-your-profiles-41a334e1b37e It does a very good job in explaining how aws sso login works, especially when it is used to get access to different applications.

Best,

Didier

profile pictureAWS
ESPECIALISTA
respondido há 10 meses
profile picture
ESPECIALISTA
avaliado há 10 meses
  • Hi! I read that article, thank you. However, as this is very new to me, I may confuse things. You said, that I have to run aws sso login each time the session duration is reached. The maximum session duration is 12 hours, which means I have to open the browser 2 times a day. But from the article, it follows that I need to do it only once. So, what's the correct answer in the end?

  • Do people receive comment notifications?

Você não está conectado. Fazer login para postar uma resposta.

Uma boa resposta responde claramente à pergunta, dá feedback construtivo e incentiva o crescimento profissional de quem perguntou.

Diretrizes para responder a perguntas