Amazon IAM Identity Center
AWS IAM Identity Center (successor to AWS Single Sign-On) is where you create, or connect, your workforce identities in AWS once and manage access centrally across your AWS organization. You can create user identities directly in IAM Identity Center, or bring them from Microsoft Active Directory, and then use IAM Identity Center to manage user access to AWS accounts and business applications with single sign-on.
Solid contracts, transparent operations, and an easy start — typically complete on four or five facets with one clear soft spot.
API Evangelist profiles Amazon IAM Identity Center the way a machine reads it — 584 machine-readable artifacts across 56 APIs, pulled from the provider's own public surface and indexed so a developer, an analyst, or an AI agent can evaluate it against every other provider on the network.
Every provider in the network is reduced to the same set of machine-readable artifacts — OpenAPI contracts, event specifications, GraphQL schemas, runnable collections, pricing and rate-limit signals, security posture, OAuth scopes, and the agent surfaces (MCP servers and skills) that let software drive the API on its own. We profile them because the interface is the part of a company you can actually inspect: it is a truer signal of what a provider does than any marketing page. From those artifacts we compute the Kin Score — Amazon IAM Identity Center scores 66.9/100 (strong), with a separate agent-readiness read of 48/100 (agent ready). The full breakdown is below, followed by every artifact we hold — each card links through to its machine-readable definition on apis.io.
Kin Score
This is the API Evangelist rating — a single, repeatable read computed from the artifacts on this page. Green fill is points earned; the red track is points possible, so every bar shows earned-versus-possible at a glance.
Kin Score
How this is scored →scored 2026-07-27 · rubric v0.5
How we profile Amazon IAM Identity Center
Each block below is one kind of artifact we hold for Amazon IAM Identity Center. For each we say what it is and why it earns a place in the profile, then list every one we've indexed — capped at two rows, scroll within the panel for the rest.
APIs 56
Each API is captured as its own OpenAPI definition — every operation, parameter, and response. This is the single most useful machine-readable description of what an API does, and it's what lets us score, lint, mock, and generate against it without asking the provider for anything.
Individual APIs this provider publishes, each with its own machine-readable definition.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.CreateGroup API
The #X Amz Target=AWSIdentityStore.CreateGroup API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.creategroup.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.CreateGroupMembership API
The #X Amz Target=AWSIdentityStore.CreateGroupMembership API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.creategroupmembership.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.CreateUser API
The #X Amz Target=AWSIdentityStore.CreateUser API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.createuser.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DeleteGroup API
The #X Amz Target=AWSIdentityStore.DeleteGroup API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.deletegroup.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DeleteGroupMembership API
The #X Amz Target=AWSIdentityStore.DeleteGroupMembership API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.deletegroupmembership.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DeleteUser API
The #X Amz Target=AWSIdentityStore.DeleteUser API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.deleteuser.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DescribeGroup API
The #X Amz Target=AWSIdentityStore.DescribeGroup API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.describegroup.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DescribeGroupMembership API
The #X Amz Target=AWSIdentityStore.DescribeGroupMembership API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.describegroupmembership.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.DescribeUser API
The #X Amz Target=AWSIdentityStore.DescribeUser API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.describeuser.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.GetGroupId API
The #X Amz Target=AWSIdentityStore.GetGroupId API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.getgroupid.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.GetGroupMembershipId API
The #X Amz Target=AWSIdentityStore.GetGroupMembershipId API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.getgroupmembershipid.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.GetUserId API
The #X Amz Target=AWSIdentityStore.GetUserId API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.getuserid.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.IsMemberInGroups API
The #X Amz Target=AWSIdentityStore.IsMemberInGroups API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.ismemberingroups.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.ListGroupMemberships API
The #X Amz Target=AWSIdentityStore.ListGroupMemberships API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.listgroupmemberships.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.ListGroupMembershipsForMember API
The #X Amz Target=AWSIdentityStore.ListGroupMembershipsForMember API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.listgroupmembershipsform...
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.ListGroups API
The #X Amz Target=AWSIdentityStore.ListGroups API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.listgroups.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.ListUsers API
The #X Amz Target=AWSIdentityStore.ListUsers API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.listusers.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.UpdateGroup API
The #X Amz Target=AWSIdentityStore.UpdateGroup API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.updategroup.
Amazon IAM Identity Center #X Amz Target=AWSIdentityStore.UpdateUser API
The #X Amz Target=AWSIdentityStore.UpdateUser API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=awsidentitystore.updateuser.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.AttachCustomerManagedPolicyReferenceToPermissionSet API
The #X Amz Target=SWBExternalService.AttachCustomerManagedPolicyReferenceToPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservic...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.AttachManagedPolicyToPermissionSet API
The #X Amz Target=SWBExternalService.AttachManagedPolicyToPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.attachmanagedpo...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.CreateAccountAssignment API
The #X Amz Target=SWBExternalService.CreateAccountAssignment API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.createaccountassignment.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.CreateInstanceAccessControlAttributeConfiguration API
The #X Amz Target=SWBExternalService.CreateInstanceAccessControlAttributeConfiguration API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice....
Amazon IAM Identity Center #X Amz Target=SWBExternalService.CreatePermissionSet API
The #X Amz Target=SWBExternalService.CreatePermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.createpermissionset.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DeleteAccountAssignment API
The #X Amz Target=SWBExternalService.DeleteAccountAssignment API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.deleteaccountassignment.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DeleteInlinePolicyFromPermissionSet API
The #X Amz Target=SWBExternalService.DeleteInlinePolicyFromPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.deleteinlinepo...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DeleteInstanceAccessControlAttributeConfiguration API
The #X Amz Target=SWBExternalService.DeleteInstanceAccessControlAttributeConfiguration API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice....
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DeletePermissionsBoundaryFromPermissionSet API
The #X Amz Target=SWBExternalService.DeletePermissionsBoundaryFromPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.deletep...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DeletePermissionSet API
The #X Amz Target=SWBExternalService.DeletePermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.deletepermissionset.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DescribeAccountAssignmentCreationStatus API
The #X Amz Target=SWBExternalService.DescribeAccountAssignmentCreationStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.describeac...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DescribeAccountAssignmentDeletionStatus API
The #X Amz Target=SWBExternalService.DescribeAccountAssignmentDeletionStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.describeac...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DescribeInstanceAccessControlAttributeConfiguration API
The #X Amz Target=SWBExternalService.DescribeInstanceAccessControlAttributeConfiguration API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservic...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DescribePermissionSet API
The #X Amz Target=SWBExternalService.DescribePermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.describepermissionset.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DescribePermissionSetProvisioningStatus API
The #X Amz Target=SWBExternalService.DescribePermissionSetProvisioningStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.describepe...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DetachCustomerManagedPolicyReferenceFromPermissionSet API
The #X Amz Target=SWBExternalService.DetachCustomerManagedPolicyReferenceFromPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalserv...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.DetachManagedPolicyFromPermissionSet API
The #X Amz Target=SWBExternalService.DetachManagedPolicyFromPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.detachmanaged...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.GetInlinePolicyForPermissionSet API
The #X Amz Target=SWBExternalService.GetInlinePolicyForPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.getinlinepolicyfor...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.GetPermissionsBoundaryForPermissionSet API
The #X Amz Target=SWBExternalService.GetPermissionsBoundaryForPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.getpermissi...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListAccountAssignmentCreationStatus API
The #X Amz Target=SWBExternalService.ListAccountAssignmentCreationStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listaccountass...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListAccountAssignmentDeletionStatus API
The #X Amz Target=SWBExternalService.ListAccountAssignmentDeletionStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listaccountass...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListAccountAssignments API
The #X Amz Target=SWBExternalService.ListAccountAssignments API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listaccountassignments.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListAccountsForProvisionedPermissionSet API
The #X Amz Target=SWBExternalService.ListAccountsForProvisionedPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listaccoun...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListCustomerManagedPolicyReferencesInPermissionSet API
The #X Amz Target=SWBExternalService.ListCustomerManagedPolicyReferencesInPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListInstances API
The #X Amz Target=SWBExternalService.ListInstances API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listinstances.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListManagedPoliciesInPermissionSet API
The #X Amz Target=SWBExternalService.ListManagedPoliciesInPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listmanagedpoli...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListPermissionSetProvisioningStatus API
The #X Amz Target=SWBExternalService.ListPermissionSetProvisioningStatus API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listpermission...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListPermissionSets API
The #X Amz Target=SWBExternalService.ListPermissionSets API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listpermissionsets.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListPermissionSetsProvisionedToAccount API
The #X Amz Target=SWBExternalService.ListPermissionSetsProvisionedToAccount API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listpermiss...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ListTagsForResource API
The #X Amz Target=SWBExternalService.ListTagsForResource API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.listtagsforresource.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.ProvisionPermissionSet API
The #X Amz Target=SWBExternalService.ProvisionPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.provisionpermissionset.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.PutInlinePolicyToPermissionSet API
The #X Amz Target=SWBExternalService.PutInlinePolicyToPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.putinlinepolicytope...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.PutPermissionsBoundaryToPermissionSet API
The #X Amz Target=SWBExternalService.PutPermissionsBoundaryToPermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.putpermissio...
Amazon IAM Identity Center #X Amz Target=SWBExternalService.TagResource API
The #X Amz Target=SWBExternalService.TagResource API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.tagresource.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.UntagResource API
The #X Amz Target=SWBExternalService.UntagResource API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.untagresource.
Amazon IAM Identity Center #X Amz Target=SWBExternalService.UpdateInstanceAccessControlAttributeConfiguration API
The #X Amz Target=SWBExternalService.UpdateInstanceAccessControlAttributeConfiguration API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice....
Amazon IAM Identity Center #X Amz Target=SWBExternalService.UpdatePermissionSet API
The #X Amz Target=SWBExternalService.UpdatePermissionSet API from Amazon IAM Identity Center — 1 operation(s) for #x amz target=swbexternalservice.updatepermissionset.
Scroll within the panel for all 56 ·
Pricing Plans 1
Pricing is part of the interface. Machine-readable plans tell you what a tier costs and includes before you commit — one of the six things the Kin Score reads for commercial clarity.
Published pricing tiers and plan structures.
Rate Limits 1
Rate limits are the difference between a demo that works and a production integration that doesn't fall over. Publishing them is an operational-transparency signal — and a hard requirement for any agent that plans its own throughput.
Documented rate limits and quota policies.
Amazon Iam Identity Center Rate Limits
RATE LIMITSFinOps 1
Cost, billing, and metering signals let a buyer model the financial operations of an API before it's live. We profile them for the same reason we profile pricing: the money is part of the contract.
Cost, billing, and metering signals for API financial operations.
Features 6
The notable capabilities this provider advertises, captured as structured features so they can be searched and compared instead of read one landing page at a time.
Notable capabilities this provider offers.
Workforce Identity Management
Create and manage workforce user identities directly or connect from an external identity provider.
Single Sign-On
Enable employees to sign in once and access all assigned AWS accounts and business applications.
Centralized Access Management
Manage access to multiple AWS accounts from a single place using permission sets.
External Identity Provider Integration
Connect Microsoft Active Directory, Okta, Azure AD, and other SAML 2.0 identity providers.
Permission Set Management
Define and reuse permission policies that can be assigned to users across multiple AWS accounts.
Automated Provisioning
Automatically provision and de-provision users and groups using SCIM 2.0.
Semantic Vocabularies 1
JSON-LD contexts give the data shared meaning across APIs. We profile them because semantics are what let a machine reconcile 'customer' here with 'customer' somewhere else.
JSON-LD contexts and semantic vocabularies used across these APIs.
Spectral Rules 2
Governance rulesets we run against this provider's specs — the automated checks behind parts of the score. Profiling them makes the quality bar explicit and re-runnable, not a matter of opinion.
Amazon IAM Identity Center API Rules
SPECTRALAmazon IAM Identity Center API Rules
SPECTRALJSON Schema 171
Standalone JSON Schema definitions describe the data models behind the API. We profile them so the shapes are validatable on their own — useful long after a single request is forgotten.
Standalone JSON Schema definitions for this provider's data models.
Address
JSON SCHEMAAddresses
JSON SCHEMAAlternateIdentifier
JSON SCHEMAAttributeOperation
JSON SCHEMAAttributeOperations
JSON SCHEMAAttributeValue
JSON SCHEMACreateGroupMembershipRequest
JSON SCHEMACreateGroupMembershipResponse
JSON SCHEMACreateGroupRequest
JSON SCHEMACreateGroupResponse
JSON SCHEMACreateUserRequest
JSON SCHEMACreateUserResponse
JSON SCHEMADeleteGroupMembershipRequest
JSON SCHEMADeleteGroupMembershipResponse
JSON SCHEMADeleteGroupRequest
JSON SCHEMADeleteGroupResponse
JSON SCHEMADeleteUserRequest
JSON SCHEMADeleteUserResponse
JSON SCHEMADescribeGroupMembershipRequest
JSON SCHEMADescribeGroupMembershipResponse
JSON SCHEMADescribeGroupRequest
JSON SCHEMADescribeGroupResponse
JSON SCHEMADescribeUserRequest
JSON SCHEMADescribeUserResponse
JSON SCHEMAEmails
JSON SCHEMAExternalId
JSON SCHEMAExternalIds
JSON SCHEMAFilter
JSON SCHEMAFilters
JSON SCHEMAGetGroupIdRequest
JSON SCHEMAGetGroupIdResponse
JSON SCHEMAGetGroupMembershipIdRequest
JSON SCHEMAGetGroupMembershipIdResponse
JSON SCHEMAGetUserIdRequest
JSON SCHEMAGetUserIdResponse
JSON SCHEMAGroupIds
JSON SCHEMAGroupMembershipExistenceResult
JSON SCHEMAGroupMembershipExistenceResults
JSON SCHEMAGroupMembership
JSON SCHEMAGroupMemberships
JSON SCHEMAGroup
JSON SCHEMAGroups
JSON SCHEMAIsMemberInGroupsRequest
JSON SCHEMAIsMemberInGroupsResponse
JSON SCHEMAListGroupMembershipsForMemberRequest
JSON SCHEMAListGroupMembershipsForMemberResponse
JSON SCHEMAListGroupMembershipsRequest
JSON SCHEMAListGroupMembershipsResponse
JSON SCHEMAListGroupsRequest
JSON SCHEMAListGroupsResponse
JSON SCHEMAListUsersRequest
JSON SCHEMAListUsersResponse
JSON SCHEMAMemberId
JSON SCHEMAName
JSON SCHEMAPhoneNumber
JSON SCHEMAPhoneNumbers
JSON SCHEMAUniqueAttribute
JSON SCHEMAUpdateGroupRequest
JSON SCHEMAUpdateGroupResponse
JSON SCHEMAUpdateUserRequest
JSON SCHEMAUpdateUserResponse
JSON SCHEMAUser
JSON SCHEMAUsers
JSON SCHEMAAccessControlAttributeList
JSON SCHEMAAccessControlAttribute
JSON SCHEMAAccessControlAttributeValue
JSON SCHEMAAccessControlAttributeValueSourceList
JSON SCHEMAAccountAssignmentList
JSON SCHEMAAccountAssignmentOperationStatusList
JSON SCHEMAAccountAssignmentOperationStatusMetadata
JSON SCHEMAAccountAssignmentOperationStatus
JSON SCHEMAAccountAssignment
JSON SCHEMAAccountList
JSON SCHEMAAttachManagedPolicyToPermissionSetRequest
JSON SCHEMAAttachManagedPolicyToPermissionSetResponse
JSON SCHEMAAttachedManagedPolicyList
JSON SCHEMAAttachedManagedPolicy
JSON SCHEMACreateAccountAssignmentRequest
JSON SCHEMACreateAccountAssignmentResponse
JSON SCHEMACreatePermissionSetRequest
JSON SCHEMACreatePermissionSetResponse
JSON SCHEMACustomerManagedPolicyReferenceList
JSON SCHEMACustomerManagedPolicyReference
JSON SCHEMADeleteAccountAssignmentRequest
JSON SCHEMADeleteAccountAssignmentResponse
JSON SCHEMADeleteInlinePolicyFromPermissionSetRequest
JSON SCHEMADeleteInlinePolicyFromPermissionSetResponse
JSON SCHEMADeletePermissionSetRequest
JSON SCHEMADeletePermissionSetResponse
JSON SCHEMADescribePermissionSetRequest
JSON SCHEMADescribePermissionSetResponse
JSON SCHEMADetachManagedPolicyFromPermissionSetRequest
JSON SCHEMADetachManagedPolicyFromPermissionSetResponse
JSON SCHEMAGetInlinePolicyForPermissionSetRequest
JSON SCHEMAGetInlinePolicyForPermissionSetResponse
JSON SCHEMAInstanceAccessControlAttributeConfiguration
JSON SCHEMAInstanceList
JSON SCHEMAInstanceMetadata
JSON SCHEMAListAccountAssignmentCreationStatusRequest
JSON SCHEMAListAccountAssignmentCreationStatusResponse
JSON SCHEMAListAccountAssignmentDeletionStatusRequest
JSON SCHEMAListAccountAssignmentDeletionStatusResponse
JSON SCHEMAListAccountAssignmentsRequest
JSON SCHEMAListAccountAssignmentsResponse
JSON SCHEMAListInstancesRequest
JSON SCHEMAListInstancesResponse
JSON SCHEMAListManagedPoliciesInPermissionSetRequest
JSON SCHEMAListManagedPoliciesInPermissionSetResponse
JSON SCHEMAListPermissionSetProvisioningStatusRequest
JSON SCHEMAListPermissionSetProvisioningStatusResponse
JSON SCHEMAListPermissionSetsRequest
JSON SCHEMAListPermissionSetsResponse
JSON SCHEMAListTagsForResourceRequest
JSON SCHEMAListTagsForResourceResponse
JSON SCHEMAOperationStatusFilter
JSON SCHEMAPermissionSetList
JSON SCHEMAPermissionSetProvisioningStatusList
JSON SCHEMAPermissionSetProvisioningStatusMetadata
JSON SCHEMAPermissionSetProvisioningStatus
JSON SCHEMAPermissionSet
JSON SCHEMAPermissionsBoundary
JSON SCHEMAPrincipalType
JSON SCHEMAProvisionPermissionSetRequest
JSON SCHEMAProvisionPermissionSetResponse
JSON SCHEMAProvisionTargetType
JSON SCHEMAProvisioningStatus
JSON SCHEMAPutInlinePolicyToPermissionSetRequest
JSON SCHEMAPutInlinePolicyToPermissionSetResponse
JSON SCHEMAPutPermissionsBoundaryToPermissionSetRequest
JSON SCHEMAStatusValues
JSON SCHEMATagKeyList
JSON SCHEMATagList
JSON SCHEMATagResourceRequest
JSON SCHEMATagResourceResponse
JSON SCHEMATag
JSON SCHEMATargetType
JSON SCHEMAUntagResourceRequest
JSON SCHEMAUntagResourceResponse
JSON SCHEMAUpdatePermissionSetRequest
JSON SCHEMAUpdatePermissionSetResponse
JSON SCHEMAScroll within the panel for all 171 ·
JSON Structure 171
JSON Structure captures the data shapes in a form built for tooling — a complement to JSON Schema that keeps the model machine-legible.
JSON Structure definitions describing this provider's data shapes.
Identitystore Address Structure
JSON STRUCTUREIdentitystore Addresses Structure
JSON STRUCTUREIdentitystore Alternate Identifier Structure
JSON STRUCTUREIdentitystore Attribute Operation Structure
JSON STRUCTUREIdentitystore Attribute Operations Structure
JSON STRUCTUREIdentitystore Attribute Value Structure
JSON STRUCTUREIdentitystore Create Group Membership Request Structure
JSON STRUCTUREIdentitystore Create Group Membership Response Structure
JSON STRUCTUREIdentitystore Create Group Request Structure
JSON STRUCTUREIdentitystore Create Group Response Structure
JSON STRUCTUREIdentitystore Create User Request Structure
JSON STRUCTUREIdentitystore Create User Response Structure
JSON STRUCTUREIdentitystore Delete Group Membership Request Structure
JSON STRUCTUREIdentitystore Delete Group Membership Response Structure
JSON STRUCTUREIdentitystore Delete Group Request Structure
JSON STRUCTUREIdentitystore Delete Group Response Structure
JSON STRUCTUREIdentitystore Delete User Request Structure
JSON STRUCTUREIdentitystore Delete User Response Structure
JSON STRUCTUREIdentitystore Describe Group Request Structure
JSON STRUCTUREIdentitystore Describe Group Response Structure
JSON STRUCTUREIdentitystore Describe User Request Structure
JSON STRUCTUREIdentitystore Describe User Response Structure
JSON STRUCTUREIdentitystore Email Structure
JSON STRUCTUREIdentitystore Emails Structure
JSON STRUCTUREIdentitystore External Id Structure
JSON STRUCTUREIdentitystore External Ids Structure
JSON STRUCTUREIdentitystore Filter Structure
JSON STRUCTUREIdentitystore Filters Structure
JSON STRUCTUREIdentitystore Get Group Id Request Structure
JSON STRUCTUREIdentitystore Get Group Id Response Structure
JSON STRUCTUREIdentitystore Get Group Membership Id Request Structure
JSON STRUCTUREIdentitystore Get Group Membership Id Response Structure
JSON STRUCTUREIdentitystore Get User Id Request Structure
JSON STRUCTUREIdentitystore Get User Id Response Structure
JSON STRUCTUREIdentitystore Group Ids Structure
JSON STRUCTUREIdentitystore Group Membership Structure
JSON STRUCTUREIdentitystore Group Memberships Structure
JSON STRUCTUREIdentitystore Group Structure
JSON STRUCTUREIdentitystore Groups Structure
JSON STRUCTUREIdentitystore Is Member In Groups Request Structure
JSON STRUCTUREIdentitystore Is Member In Groups Response Structure
JSON STRUCTUREIdentitystore List Group Memberships Request Structure
JSON STRUCTUREIdentitystore List Group Memberships Response Structure
JSON STRUCTUREIdentitystore List Groups Request Structure
JSON STRUCTUREIdentitystore List Groups Response Structure
JSON STRUCTUREIdentitystore List Users Request Structure
JSON STRUCTUREIdentitystore List Users Response Structure
JSON STRUCTUREIdentitystore Member Id Structure
JSON STRUCTUREIdentitystore Name Structure
JSON STRUCTUREIdentitystore Phone Number Structure
JSON STRUCTUREIdentitystore Phone Numbers Structure
JSON STRUCTUREIdentitystore Unique Attribute Structure
JSON STRUCTUREIdentitystore Update Group Request Structure
JSON STRUCTUREIdentitystore Update Group Response Structure
JSON STRUCTUREIdentitystore Update User Request Structure
JSON STRUCTUREIdentitystore Update User Response Structure
JSON STRUCTUREIdentitystore User Structure
JSON STRUCTUREIdentitystore Users Structure
JSON STRUCTURESso Admin Access Control Attribute List Structure
JSON STRUCTURESso Admin Access Control Attribute Structure
JSON STRUCTURESso Admin Access Control Attribute Value Structure
JSON STRUCTURESso Admin Account Assignment List Structure
JSON STRUCTURESso Admin Account Assignment Operation Status Structure
JSON STRUCTURESso Admin Account Assignment Structure
JSON STRUCTURESso Admin Account List Structure
JSON STRUCTURESso Admin Attach Customer Managed Policy Reference To Permission Set Request Structure
JSON STRUCTURESso Admin Attach Customer Managed Policy Reference To Permission Set Response Structure
JSON STRUCTURESso Admin Attached Managed Policy List Structure
JSON STRUCTURESso Admin Attached Managed Policy Structure
JSON STRUCTURESso Admin Create Account Assignment Request Structure
JSON STRUCTURESso Admin Create Account Assignment Response Structure
JSON STRUCTURESso Admin Create Permission Set Request Structure
JSON STRUCTURESso Admin Create Permission Set Response Structure
JSON STRUCTURESso Admin Customer Managed Policy Reference Structure
JSON STRUCTURESso Admin Delete Account Assignment Request Structure
JSON STRUCTURESso Admin Delete Account Assignment Response Structure
JSON STRUCTURESso Admin Delete Permission Set Request Structure
JSON STRUCTURESso Admin Delete Permission Set Response Structure
JSON STRUCTURESso Admin Describe Permission Set Request Structure
JSON STRUCTURESso Admin Describe Permission Set Response Structure
JSON STRUCTURESso Admin Detach Customer Managed Policy Reference From Permission Set Request Structure
JSON STRUCTURESso Admin Detach Customer Managed Policy Reference From Permission Set Response Structure
JSON STRUCTURESso Admin Instance List Structure
JSON STRUCTURESso Admin Instance Metadata Structure
JSON STRUCTURESso Admin List Account Assignments Request Structure
JSON STRUCTURESso Admin List Account Assignments Response Structure
JSON STRUCTURESso Admin List Customer Managed Policy References In Permission Set Response Structure
JSON STRUCTURESso Admin List Instances Request Structure
JSON STRUCTURESso Admin List Instances Response Structure
JSON STRUCTURESso Admin List Permission Sets Request Structure
JSON STRUCTURESso Admin List Permission Sets Response Structure
JSON STRUCTURESso Admin List Tags For Resource Request Structure
JSON STRUCTURESso Admin List Tags For Resource Response Structure
JSON STRUCTURESso Admin Operation Status Filter Structure
JSON STRUCTURESso Admin Permission Set List Structure
JSON STRUCTURESso Admin Permission Set Provisioning Status Structure
JSON STRUCTURESso Admin Permission Set Structure
JSON STRUCTURESso Admin Permissions Boundary Structure
JSON STRUCTURESso Admin Principal Type Structure
JSON STRUCTURESso Admin Provision Permission Set Request Structure
JSON STRUCTURESso Admin Provision Permission Set Response Structure
JSON STRUCTURESso Admin Provision Target Type Structure
JSON STRUCTURESso Admin Provisioning Status Structure
JSON STRUCTURESso Admin Status Values Structure
JSON STRUCTURESso Admin Tag Key List Structure
JSON STRUCTURESso Admin Tag List Structure
JSON STRUCTURESso Admin Tag Resource Request Structure
JSON STRUCTURESso Admin Tag Resource Response Structure
JSON STRUCTURESso Admin Tag Structure
JSON STRUCTURESso Admin Target Type Structure
JSON STRUCTURESso Admin Untag Resource Request Structure
JSON STRUCTURESso Admin Untag Resource Response Structure
JSON STRUCTURESso Admin Update Permission Set Request Structure
JSON STRUCTURESso Admin Update Permission Set Response Structure
JSON STRUCTUREScroll within the panel for all 171 ·
Examples 165
Real request and response payloads are what turn a spec from abstract into obvious — and they're one of the twelve things an agent needs to call an API correctly on the first try.
Example request and response payloads for these APIs.
Identitystore Email Example
EXAMPLEIdentitystore Emails Example
EXAMPLEIdentitystore Filter Example
EXAMPLEIdentitystore Group Example
EXAMPLEIdentitystore Groups Example
EXAMPLEIdentitystore Name Example
EXAMPLEIdentitystore User Example
EXAMPLEIdentitystore Users Example
EXAMPLESso Admin Tag Example
EXAMPLESso Admin Tag List Example
EXAMPLEScroll within the panel for all 165 ·
Security Posture 4
Authentication, domain security, vulnerability disclosure, and trust-center signals — the evidence that a provider takes security seriously enough to document it. We profile it because you can't govern what you can't see.
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Agentic Access 1
An x-agentic-access contract marks which operations are safe for an agent to run on its own and which need a human in the loop. It is the difference between an API an agent can use and one it can use safely.
Recommended x-agentic-access execution contracts for AI agents.
Use Cases 4
What developers actually build with this provider — captured so the catalogue answers 'what is this for', not just 'what does this expose'.
What developers build with this provider.
Workforce SSO
Enable employees to access all AWS accounts and business apps with a single set of credentials.
Centralized AWS Account Access
Manage access to dozens or hundreds of AWS accounts from a single control plane.
Just-in-Time Access
Grant temporary elevated access to AWS accounts without permanent permissions.
Compliance and Audit
Centralize access logging and produce audit reports for security compliance reviews.
Resources
Every other property we hold for Amazon IAM Identity Center — documentation, portals, status pages, policies, and corporate surface — grouped by the job it does, following the integrator's arc from getting started to running in production.
Get Started 4
Portal, sign-up, and the first successful call
Documentation 1
Reference material describing how the API behaves
Agent Surfaces 1
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 3
Pagination, idempotency, versioning, errors, and events
Build 1
SDKs, sample code, and the tooling you integrate with
Access & Security 4
Authentication, authorization, and security posture
Operate 3
Status, limits, changes, and where to get help
Commercial 2
Pricing, plans, and the legal terms of use
Company 2
The organization behind the API
← All providers · Data indexed from github.com/api-evangelist/amazon-iam-identity-center · machine-readable index on apis.io