Set up an Identity Center instance — IAM Identity Center

Your goal

Create an Identity Center account instance and give it a recognizable name.

Why this matters

Different Identity Center instance types support different access features. You will create an account instance, name it, and inspect its identity-store information. Organization permission sets are outside this lab.

Words you will use

An instance is one Identity Center setup. An account instance supports application access. An organization instance can also manage access to AWS accounts. An identity store holds identities.

How to proceed

Start a fresh emulator, read each numbered step, and enter the practice settings shown. Run the action, inspect its API receipt, then continue. Finish lab checks the emulator state again before saving your progress.

1. Create a practice account instance

Create an Identity Center account instance in your emulator. An account instance supports application access. Organization instances have additional account-access features, including permission sets.

2. Name the instance for its purpose

Choose a short practice name and update the instance. This is an account instance, so this emulator does not allow creating organization permission sets here. No real teammate is signed in.

Practice label: This label is saved in the emulator. Use 1–80 characters. Suggested practice value: moonbase.

3. Inspect the updated instance

Describe the instance and compare its name with your input. Inspect its identity-store and owner fields. This verifies instance configuration, not user provisioning or account assignments.

Practice, then check your understanding

Perform the actions yourself and inspect the returned state. Errors keep your settings so you can retry. Starting another lab clears the previous live environment. Earned XP is kept, and signed-in achievements sync to your account. Replay does not award duplicate XP.

Read the official AWS documentation for service behavior and production details.