Setting or changing your AWS account alias - AWS Account Management

Setting or changing your AWS account alias

The AWS account root user and AWS Identity and Access Management (IAM) users in the account sign in using a web URL.

If you want the URL for your IAM users to contain your company name (or another easy-to-remember identifier) instead of the AWS account ID, you can create an account alias. This section provides information about AWS account aliases and lists the API operations that you can use to create an alias.

The sign-in page URL for your account's IAM users has the following format, by default.

https://Your_Account_ID.signin.aws.amazon.com/console/

If you create an AWS account alias for your AWS account ID, the IAM user sign-in page URL looks like the following example.

https://Your_Account_Alias.signin.aws.amazon.com/console/

The original URL containing your AWS account ID remains active and can still be used after you create your AWS account alias.

Tip

To create a bookmark for your account sign-in page in your web browser, we recommend that you manually type the sign-in URL in the bookmark entry. Don't use your web browser's "bookmark this page" feature, because that can capture a lot of information that relates only to your current browser session. That information can interfere with future visits to the page.

Considerations

  • Your AWS account can have only one alias. If you create a new alias for your AWS account, the new alias overwrites the previous alias. The URL containing the previous alias stops working.

  • The account alias must be unique across all Amazon Web Services products. It must contain only lowercase letters, digits, and hyphens.

Creating, deleting, and viewing the AWS account alias

AWS Management Console

Creating or editing an account alias

Minimum permissions

To perform the following steps, you must have at least the following IAM permissions:

  • iam:ListAccountAliases

  • iam:CreateAccountAlias

  1. Sign in to the AWS Management Console as either the AWS account root user or as an IAM user or role that has the minimum permissions.

  2. Open the IAM console at https://console.aws.amazon.com/iam/.

  3. In the navigation pane, choose Dashboard.

  4. In the right-hand pane under AWS account, for Sign-in URL for IAM users in this account, choose Customize. If an alias already exists, then choose Edit.

  5. For Preferred alias, enter the name you want to use for your alias, then choose Save changes.

    Note

    You can have only one alias associated with your AWS account at a time. If you create a new alias, the previous alias is removed, and the sign-in URL that was associated with the previous alias stops working.

Deleting an account alias

Minimum permissions

To perform the following steps, you must have at least the following IAM permissions:

  • iam:ListAccountAliases

  • iam:CreateAccountAlias

  • iam:DeleteAccountAlias

  1. Sign in to the AWS Management Console as either the AWS account root user or as an IAM user or role that has the minimum permissions.

  2. Open the IAM console at https://console.aws.amazon.com/iam/.

  3. In the navigation pane, choose Dashboard.

  4. In the right-hand pane under AWS account, for Sign-in URL for IAM users in this account, choose Delete.

AWS CLI & SDKs

You can create, update, or delete an account alias by using the following SDK API operations or their AWS CLI equivalents:

Minimum permissions

To perform the following steps, you must have at least the following IAM permissions:

  • iam:ListAccountAliases

  • iam:CreateAccountAlias

  • iam:DeleteAccountAlias

To display your AWS account ID alias, run the following command.

$ aws iam list-account-aliases { "AccountAliases": [ "myaccountalias" ] }

To create an alias for your AWS Management Console sign-in, run the following command:

$ aws iam create-account-alias \ --account-alias myaliasname

This command produces no output if it's successful.

To delete an AWS account ID alias, run the following command.

$ aws iam delete-account-alias \ --account-alias bisdavid

This command produces no output if it's successful.