Today, AWS launches an account instance of IAM Identity Center that gives customers a quick path to evaluate supported AWS managed applications, such as Amazon CodeCatalyst. It allows customers to use the secure authentication model of IAM Identity Center but limited to a single AWS account and only with supported AWS managed applications. This includes new and updated APIs to manage IAM Identity Center instances.
Previously, customers evaluating Identity Center enabled AWS applications had to configure or connect to an organization-wide instance of Identity Center. Now, deployment of the new account instance of IAM Identity Center is part of the setup of supported AWS managed applications, such as Amazon CodeCatalyst. Account instances of IAM Identity Center can be used only to manage access to applications within the same AWS account. Customers that already have an organization-wide deployment of IAM Identity Center can opt into this feature and control the creation of these instances through service control policies (SCPs).
Account instances of IAM Idenity Center are available through supported AWS managed applications. Account instances are supported in all AWS regions where IAM Identity Center and the application are available.