Creating users in AWS SSO group using boto3

Question

I have used boto3 pretty much but never used it for accessing AWS SSO. It is the first time I am going to work on AWS SSO, So pretty new to this. I want to create a user in AWS SSO GROUP, but I could not find any method in this. Is there any way I can achieve this?

I know this is a very broad question, so even a direction where to look or any minor help will also be appreciated.

I have recently came across SCIM API, Any idea how I can use it to create user using that ?

Answer 1

You can use AWS SSO Single Sign-on to create an identity store(boto3 identity store) and users/groups(boto3 sso-admin), also check out permission sets again in SSO Signle Sign-On, AWS gives you several premade ones though.

At this point you should have a user/group now you use the SSO service to assign the user/group to the account(boto3 create_account_assignment) and you also need to attach the permission set to the user/group you just attached to the account, think of it having two baskets one with permission sets and one with users/groups you pick one item from each basket and you assign them together to your account using the AWS SSO service