It could be said. Maybe. Possibly. That my hubris got in the way of my success, when I said I could migrate the organizations 200+ #AWS accounts & 150+ user accounts from #IAM to #IdentityCenter & #SSO in a single quarter without interruption. #infosec #security

Maybe.

AWS SSO (IAM Identity Center) for Separation of Duties: ACM.126 Creating a permission set for DNS Administrators in AWS SSO
~~~~~~~~~~~~
by Teri Radichel | Jan 8, 2023
#aws #identitycenter #sso #separationofduties #cybersecurity

https://medium.com/cloud-security/aws-sso-iam-identity-center-for-separation-of-duties-f9e6627fc5a3

@DMEdwards
Let me know when office hours are over 🙂

Is the "IAM Identity Center delegated administrator account" different from the "delegated admin account for AWS Account Management"?

I'm a fan of the aws-cli and documenting what I do for repeatability, so I'm trying to see if I can designate a delegated account in the CLI.

(Every minute I spend trying to figure out things like this is one minute closer to giving up trying to use Identity Center for the day.)

#aws #identitycenter