Manage temporary elevated access in AWS IAM Identity Center
AWS Identity Center is a Sim integration in the Security category. Sim is the AI workspace where teams build and deploy AI agents. Sim's AWS Identity Center integration provides 16 tools that AI agents can use inside Sim's visual workflow builder. AWS Identity Center connects with an API key. Free to start at sim.ai.
Last updated
Provision and revoke temporary access to AWS accounts via IAM Identity Center (SSO). Assign permission sets to users or groups, look up users by email, and list accounts and permission sets for access request workflows.
Sign up at sim.ai in seconds. No credit card required. Your workspace is ready immediately.
Open your workspace, drag an AWS Identity Center block onto the workflow builder, and paste in your AWS Identity Center API key.
Pick the tool you need, wire in an AI agent for reasoning or data transformation, and run. Your AWS Identity Center automation is live.
Ready-to-use templates featuring AWS Identity Center. Click any to build it instantly.
16 AWS Identity Center tools available to Sim agents.
List all AWS IAM Identity Center instances in your account
List all AWS accounts in your organization
Retrieve details about a specific AWS account by its ID
List all permission sets defined in an IAM Identity Center instance
Look up a user in the Identity Store by email address
Resolve an Identity Store user ID to the user behind it. Use to turn the principalId on an account assignment into a name and email.
Look up a group in the Identity Store by display name
Resolve an Identity Store group ID to the group behind it. Use to turn the principalId on an account assignment into a group name.
List all groups in the Identity Store
List the users who belong to an Identity Store group
Grant a user or group access to an AWS account via a permission set (temporary elevated access)
Revoke a user or group access to an AWS account by removing a permission set assignment
Check the provisioning status of an account assignment creation request
Check the deprovisioning status of an account assignment deletion request
List every account and permission set a specific user or group is assigned. Use List Assignments For Account to go the other way, from an account to its principals.
List every principal assigned a specific permission set on a specific AWS account. Use for per-account access reviews.
Sim's AWS Identity Center integration adds 16 tools to the AI agents you build in Sim's visual workflow builder. Manage temporary elevated access in AWS IAM Identity Center.
