2 Answers
0
Are you interested in setting a display name when you log in with an IAM role? If so, you can set the RoleSessionNameAttribute.
The value of the Name attribute in the Attribute tag is case-sensitive. It must be set to https://aws.amazon.com/SAML/Attributes/RoleSessionName exactly.
Example:
<Attribute Name="https://aws.amazon.com/SAML/Attributes/RoleSessionName">
<AttributeValue>user-id-name</AttributeValue>
</Attribute>
answered 16 days ago
0
re: What I'm specifically asking is if you can set it to an arbitrary value like you can with the switchrole api.
No. (as far as I can tell). The switch role widget you reference to specifically calls out displayName.
My interpretation is you want the AWS Console UI reflect an arbitrary value. AWS Console being a first party user interface hasn't been particular customization within a AWS account.
answered 16 days ago
Relevant questions
Route 53 showing IP in browser instead of my domain name
asked 2 years agoQuicksight: Change KPI visualization's Value and Target Value display column name
asked a month agoWhen querying athena using aws sdk, is it necessary to save results in s3?
Accepted Answerasked a month agoAWS SSO Current Account Name
asked 6 months agoNo resource to display when configuring AWS Cloud9 for a team
asked 8 months agoSetting console display name when using signin.aws.amazon.com/federation
asked 16 days agoRestrictions on login using IP address when using AWS SSO cloud application.
Accepted Answerasked 2 months agoTrouble using display name for AWS SES sender address
Accepted Answerasked 3 months agoSet bot display name in Connect prompts
asked 6 months ago"Bucket name already exists", but it is not listed on the S3 Mgmt Console
asked 4 years ago
I am aware you can set rolesessionname and have that appear in the upper right of the console as: "role/rolesessionname @ aws account or alias". What I'm specifically asking is if you can set it to an arbitrary value like you can with the switchrole api. That endpoint allows you to set both the display name and the color and it allows things like spaces which you can't use in the rolesessionname. With that api, I have the flexibility of setting it to something like: "Speedrun Prod Admin us-west-2". Whereas setting the role session name would make it something like: "speedrun-Admin/Speedrun-Prod-Admin-us-west-2 @ XXXXXXXXXXX"