IAM Identity Center now enables programmatic AWS account access for customer managed applications
News
IAM Identity Center now enables customer managed applications to programmatically access AWS accounts on behalf of users through trusted token issuers.
- Applications can discover accounts and roles assigned to users
- Retrieve temporary credentials for AWS account access without re-authentication
- Configure external identity providers as trusted token issuers in IAM Identity Center
- Eliminates redundant sign-in prompts after external IdP authentication
- Available for organization instances with explicit administrator enablement
- Supported across all commercial AWS Regions, GovCloud, and China Regions
This feature streamlines access for customer managed applications by reducing authentication friction while maintaining centralized governance controls.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Jun 22
2026
2026
AWS IAM Identity Center now supports separate quotas for AWS accounts and applications
Oct 23
2024
2024
AWS IAM Identity Center simplifies calls to AWS services with single identity context
May 13
2024
2024
How to use AWS managed applications with IAM Identity Center: Enable Amazon Q without migrating existing IAM federation flows
Mar 14
2026
2026
Deploy AWS applications and access AWS accounts across multiple Regions with IAM Identity Center
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.