4 ms·
You don't need to sso in each and every account, you can just have a user in the main org (or at any point in the org tree that is most appropriate) and assume
by avereveard 4y ago
You don't need to sso in each and every account, you can just have a user in the main org (or at any point in the org tree that is most appropriate) and assume the role within the account you want to manage.
- zeroimpl 4y agoThe browser will only remember the last 5 roles you’ve assumed, so it’s still a pain.
- rcrowley 4y agoThat UX is atrocious. Substrate [1] instead presents you with a list of all your accounts with a link to assume your role in that account in the AWS Console (and parallel tools for assuming that role in a terminal, too). [1] <https://src-bin.com/substrate/ https://src-bin.com/substrate/>
- sameg14 4y agoWe use Okta and put ppl in groups so I'm not sure if that would work.