# Amazon IAM Identity Center **Canonical:** https://apis.io/providers/amazon-iam-identity-center/ **Website:** https://aws.amazon.com/iam/identity-center/ **APIs profiled:** 56 AWS IAM Identity Center (successor to AWS Single Sign-On) is where you create, or connect, your workforce identities in AWS once and manage access centrally across your AWS organization. You can create user identities directly in IAM Identity Center, or bring them from Microsoft Active Directory, and then use IAM Identity Center to manage user access to AWS accounts and business applications with single sign-on. ## Kin Score — 49.4 / 100 (developing) Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 49.4). | Facet | Score | |---|---| | Discoverability | 59.3 | | Contract Quality | 67.1 | | Governance | 25.0 | | Contract Governance | 25.0 | | Operational Transparency | 26.3 | | Developer Ergonomics | 50.0 | | Commercial Clarity | 51.3 | | Access Clarity | 51.3 | ## Agent readiness — 29.1 (agent-aware) | Dimension | Value | |---|---| | Spec Presence | yes | | Agentic Access | derived | | Reversibility Documented | no | | MCP Server | no | | Auth Clarity | yes | | Idempotency | no | | Error Semantics | no | | OpenAPI Examples | no | | Rate Limit Signal | documented | | Event Surface Described | no | | Agent Skills | no | | Well Known Catalog | no | | Consent Identity | no | | Agent Card | no | | Dry Run Mode | no | ## Access Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high). ## APIs (56) - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.CreateGroup API** — The #X Amz Target=AWSIdentityStore.CreateGroup API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.creategroup. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.CreateGroupMembership API** — The #X Amz Target=AWSIdentityStore.CreateGroupMembership API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.creategroupmembership. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.CreateUser API** — The #X Amz Target=AWSIdentityStore.CreateUser API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.createuser. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DeleteGroup API** — The #X Amz Target=AWSIdentityStore.DeleteGroup API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.deletegroup. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DeleteGroupMembership API** — The #X Amz Target=AWSIdentityStore.DeleteGroupMembership API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.deletegroupmembership. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DeleteUser API** — The #X Amz Target=AWSIdentityStore.DeleteUser API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.deleteuser. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DescribeGroup API** — The #X Amz Target=AWSIdentityStore.DescribeGroup API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.describegroup. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DescribeGroupMembership API** — The #X Amz Target=AWSIdentityStore.DescribeGroupMembership API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.describegroupmembership. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DescribeUser API** — The #X Amz Target=AWSIdentityStore.DescribeUser API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.describeuser. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.GetGroupId API** — The #X Amz Target=AWSIdentityStore.GetGroupId API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.getgroupid. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.GetGroupMembershipId API** — The #X Amz Target=AWSIdentityStore.GetGroupMembershipId API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.getgroupmembershipid. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.GetUserId API** — The #X Amz Target=AWSIdentityStore.GetUserId API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.getuserid. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.IsMemberInGroups API** — The #X Amz Target=AWSIdentityStore.IsMemberInGroups API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.ismemberingroups. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.ListGroupMemberships API** — The #X Amz Target=AWSIdentityStore.ListGroupMemberships API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.listgroupmemberships. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.ListGroupMembershipsForMember API** — The #X Amz Target=AWSIdentityStore.ListGroupMembershipsForMember API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.listgroupmembershipsform... - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.ListGroups API** — The #X Amz Target=AWSIdentityStore.ListGroups API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.listgroups. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.ListUsers API** — The #X Amz Target=AWSIdentityStore.ListUsers API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.listusers. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.UpdateGroup API** — The #X Amz Target=AWSIdentityStore.UpdateGroup API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.updategroup. - **Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.UpdateUser API** — The #X Amz Target=AWSIdentityStore.UpdateUser API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.updateuser. - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.AttachCustomerManagedPolicyReferenceToPermissionSet API** — The #X Amz Target=SWBExternalService.AttachCustomerManagedPolicyReferenceToPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservic... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.AttachManagedPolicyToPermissionSet API** — The #X Amz Target=SWBExternalService.AttachManagedPolicyToPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.attachmanagedpo... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.CreateAccountAssignment API** — The #X Amz Target=SWBExternalService.CreateAccountAssignment API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.createaccountassignment. - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.CreateInstanceAccessControlAttributeConfiguration API** — The #X Amz Target=SWBExternalService.CreateInstanceAccessControlAttributeConfiguration API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.CreatePermissionSet API** — The #X Amz Target=SWBExternalService.CreatePermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.createpermissionset. - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DeleteAccountAssignment API** — The #X Amz Target=SWBExternalService.DeleteAccountAssignment API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.deleteaccountassignment. - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DeleteInlinePolicyFromPermissionSet API** — The #X Amz Target=SWBExternalService.DeleteInlinePolicyFromPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.deleteinlinepo... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DeleteInstanceAccessControlAttributeConfiguration API** — The #X Amz Target=SWBExternalService.DeleteInstanceAccessControlAttributeConfiguration API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DeletePermissionsBoundaryFromPermissionSet API** — The #X Amz Target=SWBExternalService.DeletePermissionsBoundaryFromPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.deletep... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DeletePermissionSet API** — The #X Amz Target=SWBExternalService.DeletePermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.deletepermissionset. - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DescribeAccountAssignmentCreationStatus API** — The #X Amz Target=SWBExternalService.DescribeAccountAssignmentCreationStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.describeac... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DescribeAccountAssignmentDeletionStatus API** — The #X Amz Target=SWBExternalService.DescribeAccountAssignmentDeletionStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.describeac... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DescribeInstanceAccessControlAttributeConfiguration API** — The #X Amz Target=SWBExternalService.DescribeInstanceAccessControlAttributeConfiguration API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservic... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DescribePermissionSet API** — The #X Amz Target=SWBExternalService.DescribePermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.describepermissionset. - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DescribePermissionSetProvisioningStatus API** — The #X Amz Target=SWBExternalService.DescribePermissionSetProvisioningStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.describepe... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DetachCustomerManagedPolicyReferenceFromPermissionSet API** — The #X Amz Target=SWBExternalService.DetachCustomerManagedPolicyReferenceFromPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalserv... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.DetachManagedPolicyFromPermissionSet API** — The #X Amz Target=SWBExternalService.DetachManagedPolicyFromPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.detachmanaged... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.GetInlinePolicyForPermissionSet API** — The #X Amz Target=SWBExternalService.GetInlinePolicyForPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.getinlinepolicyfor... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.GetPermissionsBoundaryForPermissionSet API** — The #X Amz Target=SWBExternalService.GetPermissionsBoundaryForPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.getpermissi... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListAccountAssignmentCreationStatus API** — The #X Amz Target=SWBExternalService.ListAccountAssignmentCreationStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listaccountass... - **Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListAccountAssignmentDeletionStatus API** — The #X Amz Target=SWBExternalService.ListAccountAssignmentDeletionStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listaccountass... - …and 16 more, listed in full on the page. ## Agentic access (1) - **Amazon Iam Identity Center Agentic Access** — 56 operations · 56 acting · 4 human-in-the-loop ## Security (4) - **Amazon Iam Identity Center Authentication** — apiKey · 1 scheme - **Amazon Iam Identity Center Domain Security** — TLSv1.3 · HSTS · DMARC - **Amazon Iam Identity Center Vulnerability Disclosure** — security.txt · contact published - **Amazon Iam Identity Center Trust Center** — PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140 ## Plans (1) - **Amazon Iam Identity Center Plans Pricing** ## Use cases (4) - **Workforce SSO** — Enable employees to access all AWS accounts and business apps with a single set of credentials. - **Centralized AWS Account Access** — Manage access to dozens or hundreds of AWS accounts from a single control plane. - **Just-in-Time Access** — Grant temporary elevated access to AWS accounts without permanent permissions. - **Compliance and Audit** — Centralize access logging and produce audit reports for security compliance reviews. ## Tags Access Control, Authentication, Identity Management, Single Sign-On --- Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/amazon-iam-identity-center/). Scores are computed from the provider's own public artifacts under a published rubric.