How to Use AWS Managed Grafana with Local IAM Identity Center

Select Language:

If you’re using Amazon Managed Grafana, it’s important to know that it connects only with the IAM Identity Center that’s linked to your AWS Organization. It doesn’t support setting up with a standalone or local IAM Identity Center that exists within just one account. This is a deliberate design choice because, once you enable IAM Identity Center at the organizational level, it becomes the central point for managing identities across all AWS services you’re using, including Managed Grafana.

To ensure smooth integration, make sure your IAM Identity Center is enabled at the organization level. This way, all users and permissions are managed centrally, making it easier to control access to Grafana and other services.

For detailed guidance on how to set up authentication in Amazon Managed Grafana, visit the official documentation links:

Authentication in Amazon Managed Grafana: https://docs.aws.amazon.com/grafana/latest/userguide/authentication-in-AMG.html
Single Sign-On (SSO) setup: https://docs.aws.amazon.com/grafana/latest/userguide/authentication-in-AMG-SSO.html
Understanding how IAM Identity Center works with AWS Organizations: https://docs.aws.amazon.com/singlesignon/latest/userguide/identity-center-and-orgs.html

By following these best practices, you’ll be able to set up and manage your Grafana access smoothly, leveraging theOrg-wide IAM Identity Center for a seamless user experience.