Is there a practical way to list all groups from AWS SSO?

Question

Hi, I have a bunch of AWS SSO Groups I would like to list via the API so I can acquire the Name and GroupID.
The API call ListGroups (https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_ListGroups.html) is pretty useless. It must filter on DisplayName and a value is currently required. As far as I could tell via the old AWS Forums, a wild card search and impartial searches are not allowed. I've tried them myself (impartial and wildcard) with the boto3 SDK and nope. Afterwards, I'd like to use the existing API calls to assign permissionsets to said groups.

AWS cannot be serious in that they don't have an API call to list the groups present?

Keane, Aidan · Accepted Answer

Updated repo link -

Hi - please take a look at the following repo : 
https://github.com/onemorepereira/aws-sso-reporter

Simon Pilepich · Answer

This API has since been created and is also available in the current boto3 SDK but is in IdentityStore namespace.

https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_Operations.html
https://boto3.amazonaws.com/v1/documentation/api/latest/reference/services/identitystore.html

Is there a practical way to list all groups from AWS SSO?

新增您的答案

相關內容