AWS singlesignon documentation change
Summary
Added AWS CLI examples for creating groups in IAM Identity Center
Security assessment
Expanded operational documentation to include CLI usage. While group management is security-adjacent, this change does not introduce new security features or address vulnerabilities.
Diff
diff --git a/singlesignon/latest/userguide/addgroups.md b/singlesignon/latest/userguide/addgroups.md index d75630cc0..130ea118d 100644 --- a//singlesignon/latest/userguide/addgroups.md +++ b//singlesignon/latest/userguide/addgroups.md @@ -7 +7,4 @@ -Use the following procedure to add groups to your Identity Center directory using the IAM Identity Center console. Alternatively, you can call the AWS API operation [CreateGroup](https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_CreateGroup.html) to add groups. +Use the following procedure to add groups to your Identity Center directory. Alternatively, you can call the AWS API operation [CreateGroup](https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/API_CreateGroup.html) to add groups. + +Console + @@ -24 +27,23 @@ Use the following procedure to add groups to your Identity Center directory usin -After you add this group to your Identity Center directory, you can assign single sign-on access to this group. For more information, see [Assign user or group access to AWS accounts](./assignusers.html). +AWS CLI + + +###### To add a group + +The following `create-group` command creates a new group in your Identity Center directory. + + + aws identitystore create-group \ + --identity-store-id d-1234567890 \ + --display-name "Developers" \ + --description "Group that contains all developers" + + +Output: + + + { + "GroupId": "1a2b3c4d-5e6f-7g8h-9i0j-1k2l3m4n5o6p", + "IdentityStoreId": "d-1234567890" + } + +After you add this group to your Identity Center directory, you can assign single sign-on access to the group. For more information, see [Assign user or group access to AWS accounts](./assignusers.html).