How to get all Identity Center instance IDs from the management account in AWS organization

0

Hi, I have an AWS organization where I have the management account (my root account) and I added a member account. In the management account I created an Identity center instance (us-east-1) to connected through SSO with an IdP. Now I decided, to sign in as the member account and from there I created as well an Identity Center instance(us-west-2), a brand new one, different from the one on management account. Then just to verify, from the AWS CLI the identity center id a.k.a identiry store id, I used the command: aws sso-admin list-instances --region us-west-2, with this command I got the id of the instance just created and if i edited to: aws sso-admin list-instances --region us-east-1 , I got the instance id of the management account. Well so that´s great from the member account I´m able to get the Identity Store ids but then If i switch to the management account and I tried to use AWS CLI with the same logic, I just get result of the id from the instance created on the management account and not the one that I created on the member account. :( I have tried everything and no results. Also for me this is a weird behavior, Why from a member account I can see more ids than in the management account?

1回答
1

I think the behavior is expected. An Account instance is only visible within the account where it's created. That's why you couldn't see the instance created under the member account even from the management account since it is an isolated instance that can only be used by the member account. The reason you can see the instance you created under the management account is because that instance is an organization instance.

profile pictureAWS
エキスパート
回答済み 1ヶ月前
profile pictureAWS
エキスパート
レビュー済み 1ヶ月前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ