AWS SSO With External Account

Question

Hi, I'm working on out internal AWS SSO. 
If i try to login to one of organization account i have the option to open the Management Console or to get the access key and secret key by clicking on "programmatic access". This option is also avaiable from cli using "aws sso configure" command.

When i add an external AWS Account (that not belongs to our organization) this option is not available and when i click on the external account the login on Management Console is performed.

How can i configure sso to show the "Command line or programmatic access" on external AWS account?

thanks in advance
Piero

Answer

The reason for this is that external accounts are treated as third party applications which we currently dont generate API keys for.
AWS accounts belonging to your organization are treated differently and known as AWS accounts while Accounts outside your organization are added the same way you configure an application in the user portal.

AWS SSO With External Account

相關內容