DOC-427: Document SSO Admin account assignments - #934
Open
quetzalliwrites wants to merge 1 commit into
Open
Conversation
CreateAccountAssignment and ListAccountAssignments work but weren't covered by the walkthrough at all. Add a group-creation step (Identity Store) plus create/list account assignment steps, following the same structure as the existing permission set walkthrough. Verified end-to-end against a live LocalStack container: created a permission set, an Identity Store group, an account assignment, and listed it back. Output blocks are real captured responses. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
quetzalliwrites
requested review from
HarshCasper and
remotesynth
as code owners
September 9, 2026 19:43
Deploying localstack-docs with
|
| Latest commit: |
4081784
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://b69b4826.localstack-docs.pages.dev |
| Branch Preview URL: | https://doc-427-sso-admin-docs-dont.localstack-docs.pages.dev |
virtkot
approved these changes
Sep 10, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
A customer (flagged via NISC evaluation trial) ruled out SSO Admin account assignments because the docs page's walkthrough covers permission sets but never mentions
CreateAccountAssignment/ListAccountAssignmentsat all — not documented as supported, not documented as unsupported, just absent.Extended the walkthrough with three new steps, following the same structure as the existing permission set steps:
CreateAccountAssignment.ListAccountAssignments.I double-checked this with my own LocalStack auth token before writing it up: agent ran a full flow end-to-end against a live container (create permission set → create Identity Store group → create account assignment → list account assignments), so the example output blocks are real captured responses, not invented ones. This mattered here specifically because
src/data/coverage/sso-admin.jsonshowsaws_validated: falseand no test suites for these two operations, so I didn't want the agent to guess writing JSON output based on assumption alone.Linear ticket
https://linear.app/localstack/issue/DOC-427/sso-admin-docs-dont-cover-account-assignments
Test plan
npx astro buildcompletes successfully (417 pages built)