Home icon

AWS CLI Adds PKCE-based Authorization for SSO

Developer Tools Blog

The blog post announces an update to the AWS Command Line Interface (AWS CLI) v2 that adds support for OAuth 2.0 authorization code flows using the Proof Key for Code Exchange (PKCE) standard. This new standard is now the default behavior when running the `aws sso login` or `aws configure sso` commands.

Specifically, the article covers:

  • The updated behavior when running the `aws sso login` or `aws configure sso` commands, which now opens a different URL by default and prints it in the console.
  • The option to use the previous workflow with the OAuth 2.0 device authorization grant by specifying the `--use-device-code` option.
  • The recommendation to upgrade to the latest version of the AWS CLI (2.22.0) to take advantage of this new behavior.
  • A guide on configuring IAM Identity Center authentication with the AWS CLI for more information.
Go to article

The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.

Related articles

Nov 18
2024
AWS Command Line Interface adds PKCE-based authorization for single sign-on
Dec 1
2024
AWS Verified Access now supports secure access to resources over non-HTTP(S) protocols (in preview)
Nov 11
2024
AWS IAM Identity Center now supports search by permission set name
Nov 15
2024
Secure by Design: AWS enhances centralized security controls as MFA requirements expand

The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.