RE:Post via activity center

Interesting. Thanks so much for spending the time. That means a lot! I am putting this on hold until I determine whether I need to do this since my IC user fails validation on repost but works fine on the portal. More ideas below but no need for you to spend additional brainpower on it at this time:-)

My issue may be related to the fact my IC user doesn't have an AWS console grant or something. I can login to my portal but not Repost. Repost asks for a builder id or IAM. My identity center user gets an invalid credentials on repost.

Thanks again for the time.

Thank you for your reply.

First of all, it may not be possible to log in to the repost service if the IC user is not assigned to an AWS account.

To assist in resolving the issue, I will explain the testing procedure I carried out:

1. I created a permission set in the AWS account that denies all permissions.
2. I assigned the AWS account to a user with the created permission set.
3. I logged in using the created IC user.
4. On the login page of the repost service, I selected AWS Management Console.
5. As a result, I successfully logged in to the re:Post service as an IC, assuming the role of arn:aws:sts:{account}:assumed-role/AWSReservedSSO_{user}.

And you are correct. re:Post asks for either a Builder ID or IAM, and IAM Identity Center uses IAM roles.

Under the hood, when the user uses IAM Identity Center to access the AWS Management Console or CLI, the IAM Identity Center sign in session is used to obtain an IAM session, as specified in the corresponding IAM Identity Center permission set (more specifically, IAM Identity Center assumes an IAM role, which IAM Identity Center manages, in the target account).

https://docs.aws.amazon.com/singlesignon/latest/userguide/authconcept.html#sessionsconcept

I tried to find the issue related to the "invalid credentials" when accessing re:Post, but I couldn't find it. I hope you can find a way to resolve this issue. If you have any further questions, comment down below!