Back to results for “Set”
AWS › AWS Free Tier & Account Setup

What is IAM Identity Center, and why is it recommended over creating individual IAM users for team access to an AWS account?

Intermediate

Answer

IAM Identity Center, formerly known as AWS Single Sign On, lets you centrally manage user access across one or more AWS accounts using a single set of credentials, supporting integration with existing corporate identity providers, and is generally recommended over creating individual long lived IAM users, since it simplifies access management, supports temporary credentials by default, and makes it much easier to revoke or adjust a person's access in one central place as their role changes.
aws sso-admin create-permission-set --instance-arn arn:aws:sso:::instance/ssoins-12345 --name DeveloperAccess
Real-world example A growing startup migrates from creating individual IAM users for every new employee to using IAM Identity Center, allowing the team to centrally manage everyone's access to multiple AWS accounts through a single sign on experience.

Common follow-ups: How does IAM Identity Center integrate with an existing corporate directory like Active Directory?;What is the migration path from individual IAM users to IAM Identity Center?