AWS Identity Center integration
Sync AWS IAM Identity Center users, groups, permission sets, and account assignments for access reviews and offboarding.
What it connects
- Users who can sign in through Identity Center across your AWS organization.
- Groups and group memberships that grant shared access to AWS accounts.
- Permission sets that define the access profiles available across your AWS accounts.
- Account assignments mapping users and groups to permission sets in each account.
What it automates
- Map which permission sets each person holds in every AWS account.
- Trace account access that a person receives through group membership.
- List everyone assigned to an AWS account, directly or through a group.
- Provide access reviews and offboarding checks with synced assignment data.
In practice
- An auditor asks who can reach the production AWS account. STLabs answers from synced Identity Center data, listing everyone assigned directly or through a group.
- During offboarding, STLabs lists the AWS accounts and permission sets the person held through Identity Center so IT can confirm removal before closing the ticket.
- An engineer asks why they cannot reach a staging account. STLabs checks their synced group memberships and the permission sets assigned to that account.
- Before a quarterly access review, STLabs compiles every permission set assignment from the latest sync, so reviewers start from the synced records.
