Skip to content
Get Started for Free

Identity Store

Identity Store is a managed service that enables the creation and management of groups within your AWS environment. Groups are used to manage access to AWS resources, and Identity Store provides a central location to create and manage groups across your AWS accounts.

LocalStack allows you to use the Identity Store APIs to create and manage groups in your local environment. The supported APIs are available on our API Coverage section, which provides information on the extent of Identity Store integration with LocalStack.

This guide is aimed at users who are familiar with the AWS CLI and lstk aws command. It will walk you through the basics of setting up and managing groups within the AWS Identity Store using LocalStack.

Start your LocalStack container using your preferred method. This guide will demonstrate how to create a group within Identity Store, list all groups, and describe a specific group.

You can create a new group in the Identity Store using the CreateGroup API. Execute the following command to create a group with an identity store ID of testls:

Terminal window
lstk aws identitystore create-group --identity-store-id testls
Output
{
"GroupId": "38cec731-de22-45bf-9af7-b74457bba884",
"IdentityStoreId": "testls"
}

Copy the GroupId value from the output, as it will be needed in subsequent steps.

After creating groups, you might want to list all groups within the Identity Store to manage or review them. Run the following command to list all groups using the ListGroups API:

Terminal window
lstk aws identitystore list-groups --identity-store-id testls
Output
{
"Groups": [
{
"GroupId": "38cec731-de22-45bf-9af7-b74457bba884",
"ExternalIds": [],
"IdentityStoreId": "testls"
}
]
}

This command returns a list of all groups, including the group you created in the previous step.

To view details about a specific group, use the DescribeGroup API. Run the following command to describe the group you created in the previous step:

Terminal window
lstk aws describe-group --identity-store-id testls --group-id 38cec731-de22-45bf-9af7-b74457bba884
Output
{
"GroupId": "38cec731-de22-45bf-9af7-b74457bba884",
"ExternalIds": [],
"IdentityStoreId": "testls"
}

This command provides detailed information about the specific group, including its ID and any external IDs associated with it.

14 of 19 operations implemented

Available from the Ultimate plan. Licensing details

Find an API

Search the full operation list, then sort the table to compare current support.

Loading operations…

Verified on Kubernetes
Loading operations…
Complete static API list All 19 operations and their current support status
OperationStatus
CreateGroupImplemented
CreateGroupMembershipImplemented
CreateUserImplemented
DeleteGroupImplemented
DeleteGroupMembershipImplemented
DeleteUserImplemented
DescribeGroupImplemented
DescribeGroupMembershipNot implemented
DescribeUserImplemented
GetGroupIdImplemented
GetGroupMembershipIdNot implemented
GetUserIdImplemented
IsMemberInGroupsNot implemented
ListGroupMembershipsImplemented
ListGroupMembershipsForMemberImplemented
ListGroupsImplemented
ListUsersImplemented
UpdateGroupNot implemented
UpdateUserNot implemented
Was this page helpful?