2025-03-14 21:59:59 -06:00
|
|
|
# aws sso
|
|
|
|
|
|
|
|
|
|
> Manage access to AWS resources using Single Sign-On (SSO) credentials.
|
2026-02-18 06:55:01 -07:00
|
|
|
> More information: <https://docs.aws.amazon.com/cli/latest/reference/sso/>.
|
2025-03-14 21:59:59 -06:00
|
|
|
|
|
|
|
|
- Start SSO session and refresh access tokens. Requires setup using `aws configure sso`:
|
|
|
|
|
|
|
|
|
|
`aws sso login`
|
|
|
|
|
|
|
|
|
|
- End SSO session and clear cached access tokens:
|
|
|
|
|
|
|
|
|
|
`aws sso logout`
|
|
|
|
|
|
|
|
|
|
- List all AWS accounts accessible to the user:
|
|
|
|
|
|
|
|
|
|
`aws sso list-accounts`
|
|
|
|
|
|
|
|
|
|
- List all roles accessible to the user for a given AWS account:
|
|
|
|
|
|
|
|
|
|
`aws sso list-account-roles --account-id {{account}} --access-token {{token}}`
|
|
|
|
|
|
|
|
|
|
- Retrieve short-term credentials for a specific account:
|
|
|
|
|
|
2026-02-18 06:55:01 -07:00
|
|
|
`aws sso get-role-credentials --account-id {{account}} --role-name {{role}} --access-token {{token}}`
|
