# AWS Single Sign-On API

> AWS Single Sign-On API on Apizie: 4 endpoints (Returns the STS short-term credentials for a given role name that is assigned to the user., Lists all roles that are assigned to the user for a given AWS account., Lists all AWS accounts assigned to the user. These AWS accounts are assigned by the administrator of the…, Removes the locally stored SSO tokens from the client-side cache and sends an API call to the IAM Identity…) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:amazonaws-sso/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-sso`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://zieapi.vercel.app/api/cloud/amazonaws-sso
- OpenAPI: https://zieapi.vercel.app/api/cloud/amazonaws-sso/openapi.json

AWS IAM Identity Center (successor to AWS Single Sign-On) Portal is a web service that makes it easy for you to assign user access to IAM Identity Center resources such as the AWS access portal. Users can get AWS…

## Endpoints

### Returns the STS short-term credentials for a given role name that is assigned to the user.
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-sso/get-role-credentials` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| role_name | string | yes | The friendly name of the role that is assigned to the user. |
| account_id | string | yes | The identifier for the AWS account that is assigned to the user. |
| x-amz-sso_bearer_token | string | yes | The token issued by the CreateToken API call. For more information, see CreateToken in the IAM Identity Center OIDC API Reference Guide . |

### Lists all roles that are assigned to the user for a given AWS account.
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-sso/list-account-roles` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| next_token | string | no | The page token from the previous response output when you request subsequent pages. |
| max_result | integer | no | The number of items that clients can request per page. |
| x-amz-sso_bearer_token | string | yes | The token issued by the CreateToken API call. For more information, see CreateToken in the IAM Identity Center OIDC API Reference Guide . |
| account_id | string | yes | The identifier for the AWS account that is assigned to the user. |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |

### Lists all AWS accounts assigned to the user. These AWS accounts are assigned by the administrator of the…
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-sso/list-accounts` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| next_token | string | no | (Optional) When requesting subsequent pages, this is the page token from the previous response output. |
| max_result | integer | no | This is the number of items clients can request per page. |
| x-amz-sso_bearer_token | string | yes | The token issued by the CreateToken API call. For more information, see CreateToken in the IAM Identity Center OIDC API Reference Guide . |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |

### Removes the locally stored SSO tokens from the client-side cache and sends an API call to the IAM Identity…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-sso/logout` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| x-amz-sso_bearer_token | string | yes | The token issued by the CreateToken API call. For more information, see CreateToken in the IAM Identity Center OIDC API Reference Guide . |

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:amazonaws-sso/get-role-credentials" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the AWS Single Sign-On API?
Create a free Apizie key, then send GET https://zieapi.vercel.app/v1/cloud:amazonaws-sso/get-role-credentials with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the AWS Single Sign-On API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. AWS Single Sign-On itself also needs your own key from amazonaws.com.

### Can AI agents use the AWS Single Sign-On API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-sso.

### What is the status of the AWS Single Sign-On API?
Needs your own provider key (bring your own key)