Skip to content

Identity Store

Identity Store is a managed service that enables the creation and management of groups within your AWS environment. Groups are used to manage access to AWS resources, and Identity Store provides a central location to create and manage groups across your AWS accounts.

LocalStack allows you to use the Identity Store APIs to create and manage groups in your local environment. The supported APIs are available on our API Coverage section, which provides information on the extent of Identity Store integration with LocalStack.

This guide is aimed at users who are familiar with the AWS CLI and awslocal wrapper script. It will walk you through the basics of setting up and managing groups within the AWS Identity Store using LocalStack.

Start your LocalStack container using your preferred method. This guide will demonstrate how to create a group within Identity Store, list all groups, and describe a specific group.

You can create a new group in the Identity Store using the CreateGroup API. Execute the following command to create a group with an identity store ID of testls:

Terminal window
awslocal identitystore create-group --identity-store-id testls
Output
{
"GroupId": "38cec731-de22-45bf-9af7-b74457bba884",
"IdentityStoreId": "testls"
}

Copy the GroupId value from the output, as it will be needed in subsequent steps.

After creating groups, you might want to list all groups within the Identity Store to manage or review them. Run the following command to list all groups using the ListGroups API:

Terminal window
awslocal identitystore list-groups --identity-store-id testls
Output
{
"Groups": [
{
"GroupId": "38cec731-de22-45bf-9af7-b74457bba884",
"ExternalIds": [],
"IdentityStoreId": "testls"
}
]
}

This command returns a list of all groups, including the group you created in the previous step.

To view details about a specific group, use the DescribeGroup API. Run the following command to describe the group you created in the previous step:

Terminal window
awslocal describe-group --identity-store-id testls --group-id 38cec731-de22-45bf-9af7-b74457bba884
Output
{
"GroupId": "38cec731-de22-45bf-9af7-b74457bba884",
"ExternalIds": [],
"IdentityStoreId": "testls"
}

This command provides detailed information about the specific group, including its ID and any external IDs associated with it.

OperationImplementedImage
Page 1 of 0