Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

Understanding Amazon Kiro setup on IAM Identity center instances

0

I need to understand how amazon kiro setup works with the root and child IAM Identity center. I have a root IAM Identity center and when configuring Kiro in the child AWS account it creates IAM IC in the child account but it does not sync with the root account. However if I create an IAM IC first in child account and then create Kiro, it works (syncs with root account). I have following doubts or questions

  1. When Kiro creates/enables IAM IC in the child account it behaves independently and doesnt sync with root account but there are some users and groups that are added in this instance from root, how this happens? Why specific users/groups are added?
  2. My user does not have permission to setup/enable IAM IC in child account but when Kiro is enabled, the child IAM IC is created, how this works?
  3. Is it mandatory to have child IAM IC account for enabling Kiro?
Topics
Management & GovernanceMachine Learning & AISecurity, Identity, & Compliance
Tags
AWS IAM Identity CenterAWS Identity and Access ManagementAWS Account ManagementAmazon Q Developer
Language
English
asked a month ago89 views
1 Answer
0

Kiro can work with Organization or Account instances IAM Identity Center (IdC). There can only be one Organization IdC instance in a AWS Org. Each AWS account can have a account instance IdC.

Note that Kiro only support IdC in certain Regions.

My user does not have permission to setup/enable IAM IC in child account

Probably an account instance. You can block account instance creation as per documentation

AWS
EXPERT
answered a month ago
EXPERT
reviewed a month ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content