The AWS IAM Identity Center (hereafter referred to as IdC) is a service that provides single sign-on (SSO) to AWS accounts, allowing it to substitute for AWS account login by IAM User.

However, there are constraints in the permission settings of IdC that need to be considered when designing its operational management.

To address this, we have made the IdC permission settings self-service, enabling each AWS account administrator to set permissions at their discretion.

In this session, we will present an overview of IdC, the reasons for making the IdC permission settings self-service, and how we achieved it.