Loading integration
Enterprise access
Agent Serve is available to teams by invitation. Tell us what you want to build and we will set up your workspace with you.
Agent Serve · Security integration
Manage temporary elevated access in AWS IAM Identity Center
AWS Identity Center is a Security integration for Agent Serve, the AI workspace where teams build and deploy AI agents. Agent Serve's AWS Identity Center integration provides 16 AWS Identity Center tools that AI agents can use inside Agent Serve's visual workflow builder. AWS Identity Center connects with an API key. Explore deployment options with the Agent Serve team.
Last updated
Provision and revoke temporary access to AWS accounts via IAM Identity Center (SSO). Assign permission sets to users or groups, look up users by email, and list accounts and permission sets for access request workflows.
Agent Serve accounts are created by invitation. Request access for your team, or accept an invitation from your workspace admin, then sign in.
Open your workspace, drag an AWS Identity Center block onto the workflow builder, and paste in your AWS Identity Center API key.
Pick the tool you need, wire in an AI agent for reasoning or data transformation, and run. Your AWS Identity Center automation is live.
16 AWS Identity Center tools available in Agent Serve.
List all AWS IAM Identity Center instances in your account
List all AWS accounts in your organization
Retrieve details about a specific AWS account by its ID
List all permission sets defined in an IAM Identity Center instance
Look up a user in the Identity Store by email address
Resolve an Identity Store user ID to the user behind it. Use to turn the principalId on an account assignment into a name and email.
Look up a group in the Identity Store by display name
Resolve an Identity Store group ID to the group behind it. Use to turn the principalId on an account assignment into a group name.
List all groups in the Identity Store
List the users who belong to an Identity Store group
Grant a user or group access to an AWS account via a permission set (temporary elevated access)
Revoke a user or group access to an AWS account by removing a permission set assignment
Check the provisioning status of an account assignment creation request
Check the deprovisioning status of an account assignment deletion request
List every account and permission set a specific user or group is assigned. Use List Assignments For Account to go the other way, from an account to its principals.
List every principal assigned a specific permission set on a specific AWS account. Use for per-account access reviews.
Ready-to-use templates featuring AWS Identity Center. Click any to build it instantly.
Agent Serve's AWS Identity Center integration adds 16 AWS Identity Center tools to the AI agents you build in Agent Serve's visual workflow builder — you build it all visually. Manage temporary elevated access in AWS IAM Identity Center. Teams often pair AWS Identity Center with Affinity and Rippling in the same agent.
Agent Serve is available to teams by invitation. Request access and the team will map out the AWS Identity Center agents, connections, and team access your process needs.