Can "AWS IAM Identity Center" be used to access APIs without running "aws configure sso" every other time?

0

I'm referring to this article: https://docs.aws.amazon.com/cli/latest/userguide/sso-configure-profile-token.html

Do I understand correctly that I'll need to run "aws configure sso" every hour/12 hours anyway?

gefragt vor 9 Monaten223 Aufrufe
1 Antwort
1

Hi, yes, you to need refresh with a new aws sso login each time the session duration that you defined is reached.

See https://docs.aws.amazon.com/singlesignon/latest/userguide/howtosessionduration.html

For each permission set, you can specify a session duration to control the length of time 
that a user can be signed in to an AWS account. When the specified duration elapses, 
AWS signs the user out of the session.

When you create a new permission set, the session duration is set to 1 hour (in seconds) 
by default. The minimum session duration is 1 hour, and can be set to a maximum of 12 hours.
 IAM Identity Center automatically creates IAM roles in each assigned account for each permission 
set, and configures these roles with a maximum session duration of 12 hours.

I would also suggest reading https://ben11kehoe.medium.com/you-only-need-to-call-aws-sso-login-once-for-all-your-profiles-41a334e1b37e It does a very good job in explaining how aws sso login works, especially when it is used to get access to different applications.

Best,

Didier

profile pictureAWS
EXPERTE
beantwortet vor 9 Monaten
profile picture
EXPERTE
überprüft vor 9 Monaten
  • Hi! I read that article, thank you. However, as this is very new to me, I may confuse things. You said, that I have to run aws sso login each time the session duration is reached. The maximum session duration is 12 hours, which means I have to open the browser 2 times a day. But from the article, it follows that I need to do it only once. So, what's the correct answer in the end?

  • Do people receive comment notifications?

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen