SSO

Sign into AWS using your CA Google account

Sign in here: https://chelsea-apps.awsapps.com/start

Or sign in via the Google App

You can then switch between AWS accounts in the CA organisation

Add a user

Add a user to AWS SSO to allow them to access client & CA AWS accounts.

The user must be in the Chelsea Apps Google workspace, under the Cube Academy OU.

1. Go to AWS SSO Users

2. Click "Add User"

3. Enter the user's details

4. Add the user to the correct group

The username must be the user's Google account email

CLI Access

You can use SSO to authenticate with the AWS CLI. This will add the AWS account as a profile.

1. Run aws configure sso

2. Sign in with your CA Google account

3. Enter https://chelsea-apps.awsapps.com/start as the start URL

4. Enter eu-west-2 as the region

5. The SSO site will then open, sign in with your Google account and return to the CLI

6. Select the client account you wish to add

7. Select the role

8. Configure the profile

To run a command, you must then login using that profile:

aws sso login --profile Least

You can then use the profile in the CLI