identity-center

Open-source governance dashboard for AWS IAM Identity Center. Visualize who has access to what across all AWS accounts, detect risky permission sets, track changes with CloudTrail audit trails, and export compliance-ready reports — all serverless, all Terraform.

A simple tool to get structured information about accounts and groups from the IAM Identity Center (successor to AWS Single Sign-On).

Private, local-only AWS Console role switcher and IAM Identity Center profile launcher for Chrome, Edge, Firefox, and Safari.

Production-ready cloud infrastructure components, built with TypeScript and Pulumi.

A demo for my blog post on how to integrate Cognito Authentication on ALB level

Auto-scaling Kiro users to cost-effective subscription tiers based on monthly credit usage

Terraform module to protect CloudFront distributions with AWS Identity Center (SSO) using SAML and Lambda@Edge

GitOps for AWS IAM Identity Center — Permission Sets & Assignments as Code, PR-reviewed, CDK Pipeline deployed

Terraform module to manage AWS IAM Identity Center (SSO) users, including assigning users, groups, and permission sets.

One hub, many spokes, much security.

Production-grade Terraform modules for AWS infrastructure. 12 modules covering networking, compute (ECS/EKS), identity (IAM/Okta/SSO), security ops, CI/CD, backup, and DNS failover.

A set of tools to help you manage users and groups, permission sets and account assignments in AWS Identity Center.

Terraform module for AWS Identity Center wrapper with IAC best practices

A demo for my blog post about how to implement SSO using SAML and OIDC

Interactive AWS profile switcher with automatic SSO login support

Hardened fork of awslabs/ssosync, maintained by AppTweak for improved reliability and enterprise sync features

Periodic audit-log-driven sync of GitHub teams to AWS IAM Identity Center (poller + Terraform module) • This repository is defined and managed in Terraform

Used to automatically assign permissionsets to accounts base on account tags

A project consisting of an API that fixes problems with AWS's Identity Center API.