Can "AWS IAM Identity Center" be used to access APIs without running "aws configure sso" every other time?

0

I'm referring to this article: https://docs.aws.amazon.com/cli/latest/userguide/sso-configure-profile-token.html

Do I understand correctly that I'll need to run "aws configure sso" every hour/12 hours anyway?

已提問 9 個月前檢視次數 223 次
1 個回答
1

Hi, yes, you to need refresh with a new aws sso login each time the session duration that you defined is reached.

See https://docs.aws.amazon.com/singlesignon/latest/userguide/howtosessionduration.html

For each permission set, you can specify a session duration to control the length of time 
that a user can be signed in to an AWS account. When the specified duration elapses, 
AWS signs the user out of the session.

When you create a new permission set, the session duration is set to 1 hour (in seconds) 
by default. The minimum session duration is 1 hour, and can be set to a maximum of 12 hours.
 IAM Identity Center automatically creates IAM roles in each assigned account for each permission 
set, and configures these roles with a maximum session duration of 12 hours.

I would also suggest reading https://ben11kehoe.medium.com/you-only-need-to-call-aws-sso-login-once-for-all-your-profiles-41a334e1b37e It does a very good job in explaining how aws sso login works, especially when it is used to get access to different applications.

Best,

Didier

profile pictureAWS
專家
已回答 9 個月前
profile picture
專家
已審閱 9 個月前
  • Hi! I read that article, thank you. However, as this is very new to me, I may confuse things. You said, that I have to run aws sso login each time the session duration is reached. The maximum session duration is 12 hours, which means I have to open the browser 2 times a day. But from the article, it follows that I need to do it only once. So, what's the correct answer in the end?

  • Do people receive comment notifications?

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南