Cannot open IAM Identity Center / Region issue

Alternatively, you can run the shell script below to find out which region it is set in.

#!/bin/bash

regions=$(aws ec2 describe-regions --query "Regions[*].RegionName" --output text)

for region in $regions; do
        echo "Executing in region: $region"
        aws sso-admin list-instances --region "$region"
        echo "----------------------------------------"
done

If you are in a region where IAM Identity Center is configured, you can see the following response.

{
    "Instances": [
        {
            "CreatedDate": "2022-04-16T12:59:49.118000+00:00",
            "IdentityStoreId": "d-xxxxxxxx",
            "InstanceArn": "arn:aws:sso:::instance/ssoins-7xxxxxxxxxxx",
            "OwnerAccountId": "111111111111",
            "Status": "ACTIVE"
        }
    ]
}

Hi Riku, Using your script, eu-north-1 was where Identity was active. However, if I open https://eu-north-1.console.aws.amazon.com/singlesignon/home?region=eu-north-1 it still shows the "enable" button and when I click enable it gives the same error.

I tried to remove the eu-north-1 instance with CLI using root credentials aws sso-admin delete-instance --instance-arn arn:aws:sso:::instance/ssoins-6508492cb9c98300 but was not allowed:

An error occurred (AccessDeniedException) when calling the DeleteInstance operation: User: arn:aws:iam::058264075590:root is not authorized to perform: sso:DeleteInstance on resource: arn:aws:sso:::instance/ssoins-6508492cb9c98300 because no resource-based policy allows the sso:DeleteInstance action

Is the AWS account you are trying to enable IAM Identity Center for an Organizations managed account?

Is there a way to delete Identity Center using AWS CLI?

Thanks! It seems my case is this. So is there any way to walk around?

Thanks! It seems my case is this. So is there any way to walk around?