AWS CLI SSO

To Configure

aws sso configure

To Authenticate

aws sso login

Use

aws --profile <profile> <command>

When you attempt to run a command and you get:

Error when retrieving token from sso: Token has expired and refresh failed

Do:

aws --profile <profile> login

And if you want to see who you are logged in as:

aws sts get-caller-identity

It is nice to know the above, but to get your workday to flow, use: Granted and the command line tool: assume.

Resources and References

• Medium: “Boss way to authenticate AWS CLI with SSO for multi-account orgs”
• Medium: “How to set up AWS CLI with AWS Single Sign-On (SSO)”
• StackOverflow: “aws sts get-caller-identity not displaying expected account”
• Granted.dev