How do I use IAM Identity Center permission sets?
I want to use AWS IAM Identity Center (successor to AWS Single Sign-On) permission sets to provide users and groups access to an AWS account.
"I want to use AWS IAM Identity Center (successor to AWS Single Sign-On) permission sets to provide users and groups access to an AWS account.ResolutionUse IAM Identity Center to create a permission set for a user or group. Then, confirm the permissions from the user portal. In the following example, a federated user receives the ViewOnlyAccess permission set.Create a ViewOnlyAccess permission setOpen the IAM Identity Center console.In the navigation pane, choose AWS accounts.Select the AWS account that you want to create the permission set for. Then, choose Assign users or groups.Select the users that you want to create the permission set for. Then, choose Next.In Assign permission sets, choose Create permission set. For more information, see Create a permission set.Choose Create.In Permission set, choose ViewOnlyAccess, and then choose Finish.When you successfully create your permission set, you receive the following message:"We have successfully configured your AWS account. Your users can access this AWS account with the permissions you assigned".Verify that the user has ViewOnlyAccess permissionChoose Proceed to AWS accounts.In the navigation pane, choose Dashboard.In AWS access portal URL, choose your access portal URL.In the user portal login page, log in to your user portal with your user name and password for the IAM Identity Center user.Choose the AWS Account icon.Choose the account dropdown list. Note that the account has ViewOnlyAcccess permission.Choose Management console for the ViewOnlyAccess set.You are signed in to the AWS Management Console with ViewOnlyAcccess permission.Remove or delete permission setsYou can remove a permission set from an AWS account or completely delete it. Before you delete a permission set, you must remove it from all accounts. For more information, see Delete permission sets.Related informationSingle sign-on access to AWS accountsFollow"