Identity Center

Open Unified Identities › Resources, filter Providers to AWS › Identity Center, then select a row to open its details.

Identity Center

Identity Center Details

Details page contains the Risk and Exposure Point of the instance, and the Information and Issues panes.

IAM Identity Center is the control plane for workforce access across the organization. An organization has one instance, hosted in the management account or a delegated administrator. Forestall collects it once, from that account.

Identity Center Details

Information

Information Pane contains Details and Permission Sets tabs.

Details

Details tab contains attributes below about the Identity Center instance object.

Attribute	Description
ARN	The ARN of the Identity Center instance.
Status	The instance status (e.g., ACTIVE).
Instance ID	The Identity Center instance identifier; shown as the instance ARN.
Identity Store ID	The identity store bound to the instance (e.g., d-1234567890).
Account ID	The account that hosts the instance (management or delegated admin).
Object ID	The unique identifier of the instance object.

Permission Sets

Permission Sets tab lists every permission set defined in the instance. Each permission set becomes an assumable IAM role in the accounts it is provisioned to. The list contains the Name, Description and Session Duration columns.

Permission Sets

Issues

Issues pane contains identified security issues on the Identity Center instance object.