# AWS SSO Identity Store API

> AWS SSO Identity Store API on Apizie: 19 endpoints (Creates a group within the specified identity store., Creates a relationship between a member and a group. The following identifiers must be specified: GroupId ,…, Creates a user within the specified identity store., Delete a group within an identity store given GroupId ., …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://apizie.tech/v1/cloud:amazonaws-identitystore/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-identitystore`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://apizie.tech/api/cloud/amazonaws-identitystore
- OpenAPI: https://apizie.tech/api/cloud/amazonaws-identitystore/openapi.json

The Identity Store service used by AWS IAM Identity Center (successor to AWS Single Sign-On) provides a single place to retrieve all of your identities (users and groups). For more information, see the IAM Identity…

## Endpoints

### Creates a group within the specified identity store.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/create-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a relationship between a member and a group. The following identifiers must be specified: GroupId ,…
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/create-group-membership` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Creates a user within the specified identity store.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/create-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Delete a group within an identity store given GroupId .
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/delete-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Delete a membership within a group given MembershipId .
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/delete-group-membership` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Deletes a user within an identity store given UserId .
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/delete-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves the group metadata and attributes from GroupId in an identity store.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/describe-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves membership metadata and attributes from MembershipId in an identity store.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/describe-group-membership` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves the user metadata and attributes from the UserId in an identity store.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/describe-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves GroupId in an identity store.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/get-group-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves the MembershipId in an identity store.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/get-group-membership-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Retrieves the UserId in an identity store.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/get-user-id` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### Checks the user's membership in all requested groups and returns if the member exists in all queried groups.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/is-member-in-groups` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### For the specified group in the specified identity store, returns the list of all GroupMembership objects and…
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/list-group-memberships` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### For the specified member in the specified identity store, returns the list of all GroupMembership objects…
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/list-group-memberships-for-member` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Lists all groups in the identity store. Returns a paginated list of complete Group objects. Filtering for a…
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/list-groups` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### Lists all users in the identity store. Returns a paginated list of complete User objects. Filtering for a…
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/list-users` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| MaxResults | integer | no | Pagination limit |
| NextToken | string | no | Pagination token |
| body | object | no | JSON request body |

### For the specified group in the specified identity store, updates the group metadata and attributes.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/update-group` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

### For the specified user in the specified identity store, updates the user metadata and attributes.
`POST https://apizie.tech/v1/cloud:amazonaws-identitystore/update-user` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | no | JSON request body |

## Example
```
curl "https://apizie.tech/v1/cloud:amazonaws-identitystore/create-group" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the AWS SSO Identity Store API?
Create a free Apizie key, then send POST https://apizie.tech/v1/cloud:amazonaws-identitystore/create-group with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the AWS SSO Identity Store API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. AWS SSO Identity Store itself also needs your own key from amazonaws.com.

### Can AI agents use the AWS SSO Identity Store API?
Yes. Add the Apizie MCP server (https://apizie.tech/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-identitystore.

### What is the status of the AWS SSO Identity Store API?
Needs your own provider key (bring your own key)