IAM Identity Center (successor to AWS Single Sign-On)

Question

Hi Team,

I have 6-7 AWS accounts and want to manage single sign on the all aws accounts.
Could you please help me on this ?
Could you please provide the any video to create this step by step ?

I have some confusion to create this.
Do we need to create new Parent aws account for manage all these aws account ?

Thanks,
Anuj

Answer

Hi, some starting material for AWS IIC

* https://www.youtube.com/watch?v=AnbBztAmP1w
* https://frontegg.com/guides/aws-sso
* https://aosolorzano.medium.com/implementing-a-multi-account-environment-with-aws-organizations-and-the-iam-identity-center-d1cdb40bdf4d
* https://aws.amazon.com/blogs/security/how-to-enable-secure-seamless-single-sign-on-to-amazon-ec2-windows-instances-with-aws-sso/
* https://aws.amazon.com/blogs/security/how-to-automate-aws-account-creation-with-sso-user-assignment/
* https://aws.amazon.com/blogs/security/build-a-strong-identity-foundation-that-uses-your-existing-on-premises-active-directory/

Best,

Didier

Answer

As noted in the prerequisites, AWS Organizations must manage accounts to use AWS IAM Identity Center.  
https://docs.aws.amazon.com/singlesignon/latest/userguide/get-started-prereqs-considerations.html

If you are new to AWS Organizations, you don't necessarily need to create a new management account. However, from an operational standpoint, creating a dedicated new account is best practice.

IAM Identity Center (successor to AWS Single Sign-On)

Relevant content