跳至內容

Access IAM Identity Center details from member account with CLI | An error occurred (ResourceNotFoundException) when calling the DescribeGroup operation: IdentityStore not present for IdentityStoreId

0

I am trying to execute

aws identitystore describe-group
--identity-store-id d-xxxxxx
--group-id 51db35d0-40xx-70xx-10ae-xxxxxxx

from the member account of an AWS organisation which has IAM identity center setup. But it fails with the error of resource not found. An error occurred (ResourceNotFoundException) when calling the DescribeGroup operation: IdentityStore not present for IdentityStoreId: d-xxxxxx

Althought the CLI reference document shows this note - Enter image description here

已提問 2 年前檢視次數 1069 次

1 個回答
0

Hi There

You would need to run that command in the Management Account where Identity Center is provisioned. Looks like you are trying to describe it from a member account. You will need to either run the command from the management account, or assume a role in the management account. See https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-role.html#cli-configure-role-xaccount

AWS
專家

已回答 2 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。