plurigrid/asi/aws-sso-auth-guide

Trust tier 2
  • community
LLM review pending
Source check pending

Checking that the SKILL.md file is still in the repository.

AWS SSO discovery, configuration, and terminal usage

Install

npx vskill@latest install plurigrid/asi/aws-sso-auth-guide

SKILL.md

The same SKILL.md was published earlier as majiayu000/claude-skill-registry/aws-sso-auth-guide.

AWS SSO Terminal Guide

Discovery: Finding SSO Configuration

Get SSO Instance & Portal URL
bash
# From management account
aws sso-admin list-instances --profile <mgmt-profile>
# Returns: InstanceArn, IdentityStoreId (d-xxxxxxxxxx), OwnerAccountId
 
# Portal URL format: https://d-xxxxxxxxxx.awsapps.com/start
List Accounts & Permission Sets
bash
# List organization accounts
aws organizations list-accounts --profile <mgmt-profile>
 
# List permission sets
aws sso-admin list-permission-sets \
  --instance-arn <instance-arn> \
  --profile <mgmt-profile>
 
# Get permission set name
aws sso-admin describe-permission-set \
  --instance-arn <instance-arn> \
  --permission-set-arn <ps-arn> \
  --profile <mgmt-profile>
 
# Check account assignments
aws sso-admin list-account-assignments \
  --instance-arn <instance-arn> \
  --account-id <account-id> \
  --permission-set-arn <ps-arn> \
  --profile <mgmt-profile>

Configuration

Profile Structure (Recommended)
ini
# ~/.aws/config
 
[profile my-profile]
sso_session = my-sso
sso_account_id = 123456789012
sso_role_name = AdministratorAccess
region = us-east-1
 
[sso-session my-sso]
sso_start_url = https://d-xxxxxxxxxx.awsapps.com/start
sso_region = us-east-1
sso_registration_scopes = sso:account:access

Benefits: Token reuse across profiles, automatic refresh (CLI v2.22.0+)

Interactive Configuration
bash
aws configure sso

Authentication

Login Flow
bash
# Login (PKCE auth - default in CLI v2.22.0+)
aws sso login --profile my-profile
 
# Login with device code (for headless/remote)
aws sso login --profile my-profile --use-device-code
 
# Verify
aws sts get-caller-identity --profile my-profile

Token Cache: ~/.aws/sso/cache/

Key Endpoints & Flow

  • oidc.{region}.amazonaws.com - OIDC authentication
  • portal.sso.{region}.amazonaws.com - SSO portal
  • Auth flow: RegisterClient → StartDeviceAuthorization → CreateToken

Troubleshooting

Missing SSO Configuration:

bash
# Error: Missing sso_start_url, sso_region
# Fix: aws configure sso

Expired Token:

bash
# Error: Token is expired
# Fix: aws sso login --profile my-profile

Proxy SSL Issues:

bash
# Error: SSL certificate verification failed
# Fix: Set AWS_CA_BUNDLE to proxy CA certificate
export AWS_CA_BUNDLE=/path/to/proxy-ca.crt

Access Denied:

bash
# Check permission set assignments
aws sso-admin list-account-assignments \
  --instance-arn <arn> \
  --account-id <id> \
  --permission-set-arn <ps-arn>

Quick Reference

CLI Versions:

  • v2.22.0+: PKCE auth (default), auto-refresh
  • < v2.22.0: Device code auth

Authorization Types:

  • PKCE: Same-device, browser required
  • Device Code: Cross-device, browser optional

Security

  • Security scanPassed, 100 of 100Pattern checks on the skill's files.
  • Model reviewNot runA model review is scheduled for the next rescan.

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

Repository stars
67
Repository forks
12
7-day trend score
26

Stars and forks are for the whole GitHub repository, not this skill alone. Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/plurigrid/asi/aws-sso-auth-guide/badge)](https://verified-skill.com/skills/plurigrid/asi/aws-sso-auth-guide)

Something wrong with this skill or its page? Tell us.