AWS Security Blog
Author: Jake Barker
Jake is a Senior Security Consultant with AWS Professional Services. He loves making security accessible and eating great pizza.
Delegating permission set management and account assignment in AWS IAM Identity Center
January 31, 2024: Updated IAM policy for use case 3 to allow the actions sso:CreateAccountAssignment and sso:ProvisionPermissionSet for resources of type permissionSet In this blog post, we look at how you can use AWS IAM Identity Center (successor to AWS Single Sign-On) to delegate the management of permission sets and account assignments. Delegating the day-to-day […]