How to set up AWS CLI with AWS Single Sign-On (SSO)

To get access to your AWS Account with the AWS CLI and AWS SSO, you need to install AWS CLI and enable AWS SSO in the AWS Console. After enabling AWS SSO, you create an SSO user with a permission set. AWS SSO makes it easy to centrally manage SSO Access to multiple AWS accounts, moves the authentication to the IdP (Identity Provider) and removes the need for managing static, long-lived credentials. <h1>Prep Steps</h1> In order to take advantage of SSO at the CLI, you’ll first need to gather some information and get your workspace configured. What you’ll need: <ol> <li>Install the <a href="https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html" rel="noopener ugc nofollow" target="_blank">AWS CLI</a></li> <li>Your SSO sign-in URL</li> <li>The region for your SSO env (usually us-east-1)</li> <li>(Optional) The role you want to use for this profile — you may have more than one role assigned to your account (like read and admin), and you’ll need to figure out which one you want to use with the AWS CLI for your given task.</li> </ol> You can configure the AWS CLI profile using SSO in the following two ways: <a href="https://medium.com/@pushkarjoshi0410/how-to-set-up-aws-cli-with-aws-single-sign-on-sso-acf4dd88e056">Learn More</a>