AWS

​

What’s supported

​

Supported actions

• Read Actions, including full historic backfill. Please note that incremental read is not supported, a full read of the AWS instance will be done for each scheduled read.
• Write Actions.
• Proxy Actions, unsupported.

​

Supported Objects

• AccountAssignmentCreationStatus (read)
• AccountAssignmentDeletionStatus (read)
• ApplicationProviders (read)
• Applications (read/create/update/delete)
• Groups (read/create/update/delete)
• Instances (read/create/update/delete)
• PermissionSetProvisioningStatus (read)
• TrustedTokenIssuers (read/create/update/delete)
• Users (read/create/update/delete)

• AccountAssignments (create)
• ApplicationAccessScopes (update)
• ApplicationAssignmentConfigurations (update)
• ApplicationAssignments (create)
• ApplicationAuthenticationMethods (update)
• ApplicationGrants (update)
• GroupMemberships (create/delete)
• InstanceAccessControlAttributeConfigurations (create/delete)
• PermissionSets (create/update/delete)

​

Using the connector

• Username = AWS Access Key ID
• Password = AWS Access Key Secret

​

Obtain Access Key ID and Secret

​

Obtain connector metadata

• AWS region
• Identity Store ID
• Instance ARN To find these, open AWS dashboard, search for IAM Identity Center service, then open the Settings tab.