How can I get credentials from single sign-on token (SSO)

[flex-finch]

Hi there, I would like to generate credentials using SSO in my Kotlin application. I ran the command aws sso login --sso-session my_sso_session to login to an AWS session. In my code, I want to do something like this:

val client = S3Client.builder()
      .region(Region.US_EAST_1)
      .credentialsProvider(ProfileCredentialsProvider.create('my_profile'))
      .build()

I'm unsure what to use for the credentials provider to make this work. When I try this now I get the error:

Profile property 'sso_region' was not configured for 'my_profile'.

My config file looks like this:

[profile my_profile]
sso_session = my_sso_session
sso_account_id = 12345
sso_role_name = AdministratorAccess
[sso-session my_sso_session]
sso_start_url = https://12345.awsapps.com/start#
sso_region = us-east-1
sso_registration_scopes = sso:account:access

I've read this guide and understand how this works, but I don't know what code I need. If anyone could paste in a quick example, that would be really helpful.

[yasminetalby]

Answer:
Hello @flex-finch ,
Thank you very much for your submission.
You can find an example of config file setting for AWS IAM Identity Center (successor to AWS Single Sign-On) here as well as step by step configuration here.
Now for using SSO with the AWS JAVA SDK v2 there is documentation guidelines that goes over setting up single sign-on access for the SDK in the developer guide (see). For the use of profile there is an example outlined here : https://docs.aws.amazon.com/sdk-for-java/latest/developer-guide/credentials-profiles.html
Let me know if that helps out or if you need further documentation/support.
Best regards,
Yasmine

[github-actions]

Hello! A team member has marked the above comment as the likely answer to this discussion thread.

• If you agree, please upvote that comment, or click on Mark as answer. I will automatically mark the comment as the answer next time I check.

• If this answer does not help you, please downvote the answer instead and let us know why it was not helpful. I will add a label to this discussion to gain attention from the team.

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.