@aws-sdk/client-sso

GetRoleCredentials

This feature allows you to retrieve the temporary credentials for an AWS role that the user has access to through AWS SSO.

const { SSOClient, GetRoleCredentialsCommand } = require('@aws-sdk/client-sso');
const client = new SSOClient({ region: 'us-west-2' });
const command = new GetRoleCredentialsCommand({
  accountId: '123456789012',
  roleName: 'MyRoleName',
  accessToken: 'myAccessToken'
});
client.send(command).then((data) => {
  console.log(data.roleCredentials);
});

ListAccounts

This feature lists all AWS accounts assigned to the user through AWS SSO.

const { SSOClient, ListAccountsCommand } = require('@aws-sdk/client-sso');
const client = new SSOClient({ region: 'us-west-2' });
const command = new ListAccountsCommand({
  accessToken: 'myAccessToken'
});
client.send(command).then((data) => {
  console.log(data.accountList);
});

Logout

This feature logs the user out of all AWS SSO sessions.

const { SSOClient, LogoutCommand } = require('@aws-sdk/client-sso');
const client = new SSOClient({ region: 'us-west-2' });
const command = new LogoutCommand({
  accessToken: 'myAccessToken'
});
client.send(command).then(() => {
  console.log('Successfully logged out');
});